ipf.conf

Ciernik Tomas tomas at ciernik.sk
Mon May 31 13:35:12 CEST 2010


Malo by tam byt nieco taketo

pass out quick on em0 all keep state

Presne si uz nepamatam, je to uz nejaka chvila co som ipfilter pouzival,
ale keep state tam urcite nemoze chybat.

Viac na
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/firewalls-ipf.html
:)

Tomas.

On Mon, 31 May 2010 02:30:07 +0200 (CEST), Kane <Mothy na seznam.cz> wrote:
> Zbynku to je dobry napad: 
> Mam to takto:
> 
> block in on em0 all
> 
> pass in quick on lo0 all
> pass out quick on lo0 all
> 
> pass in log quick on em0 proto icmp from any to 192.168.184.128/24
> 
> pass in log quick on em0 proto xns-idp from any to 192.168.184-128/24
> 
> 
> ted resim hlavne tu vec, "aby system prijal odpovedi na odchozi
pozadavky"
> to vubec nevim jak udelat..


More information about the Users-l mailing list