src/etc/rc.firewall simple ${fw_pass} tcp from any to any established

[Dan Lukes]

R. B. Riddick napsal/wrote, On 11/11/06 20:00:
>> But I was scared, not undertstand what the established bit did, &
>> how easily an attacker might fake something, etc.
...
>> Should I still be worrying about 	established ?

> Hmm... I personally use "check-states" and "keep-state", so that it is not

	Statefull rules can stop the sophisticated intruder, but are often more 
vulnerable to DoS attacks.

	Every method has pros and cons ...

					Dan

	

-- 
Dan Lukes                                   SISAL MFF UK
AKA: dan at obluda.cz, dan at freebsd.cz,dan at kolej.mff.cuni.cz