ipfw on just inbound and not outbound

[Julian Elischer]

On 4/15/15 5:09 AM, hiren panchasara wrote:
> Apologies if this is something silly but I want to completely eliminate
> ipfw from outgoing traffic perspective. I just want to have it on
> incoming. I can always add "allow ip from any to any out" as the first
> rule but that is still ipfw doing something.
>
> Is there a way to tell ipfw to not look at outbound traffic at all?
no
>
> OR, the rule I mentioned is the best that can be done here?
yes

this touches on something I've been thinking of for a while.. per 
interface/direction rule sets.
but that doesn't exist yet.

you could write a kernel module that would disconnect the outgoing 
packet filter hooks
but "hack" comes to mind as a description there.

actually....  you could use the ipfw netgraph hook and only hook it up 
for incoming packets,
but it would probably be not much more efficient than just having the 
rule, and more complicated to set up.

>
> cheers,
> Hiren
>
> ps: Please keep me cc'd as I am not subscribed.