IPFW: Is keep/check-state inherent?

Michael Powell nightrecon at verizon.net
Sat Aug 30 08:26:00 UTC 2008

Steve Bertrand wrote:

> Hi everyone,
> I can't recall for certain, but not so long ago, I either read or heard
> about IPFW having implicit keep-state and check-state.
> Is it true that I can now omit these keywords in my rulesets?

Haven't used IPFW in years so I do not know about IPFW. 

However, this is the case for the lastest pf upgrade/import from OpenBSD.
For pf now I think you need no state if you want to disable, as keep state
is "on" by default now. 


More information about the freebsd-questions mailing list