IPFW - Keep State

[Mel]

On Friday 31 August 2007 15:38:57 Grant Peel wrote:

> I don't use NAT, so  is there any other compelling reasons? Speed etc?

Speed is one. The dynamic rules only evaluate protocol, IP addresses and 
ports. Whether this is noticeable, only you can tell.

Also, if you're passing through traffic through other means (routing, 
bridging), that expects replies via the reverse route. So basically 
everything except local servers come to think of it.

You may wanna look into: `sysctl net.inet.ip.fw | grep dyn_'.
-- 
Mel