ipfw troubles

[Andrey Simonenko]

On Thu, 3 Jul 2003 00:02:17 +0000 (UTC) in lucky.freebsd.questions, Dan Phiffer wrote:
> I guess this means I'm not serving DHCP - what kind of rule would fix
> that? I read somewhere that simply using natd adds statefulness to an
> otherwise stateless ipfw configuration. Would an unstateful ipfw setup be
> less secure in this case?
> 

It is always a good thing to add last ``deny'' rule with ``log'', so
you can see which packets are denied by the Firewall.