In message <[EMAIL PROTECTED]>, "Rodney W. Grimes" writes
:
>handle packets as they traverse ip_forward? I know Poul's or someone
>elses drawing of the H style firewall could be implemented if we had
>a way to apply rules as they traverse the ip_forward code and an easy
>way to expand your scheme to include that would be to add something
>like ``via fwd, in via fwd, out via fwd''. Note that I _think_ but
>am not certain that NAT tapping/injection occurs in ip_forward so this
>could be of benefit to those doing NAT.
I think the general syntax would be if you could say "for one of my
own IP#" that would be very powerful:
add allow tcp from any to me 22
add deny tcp from any to not me 22
--
Poul-Henning Kamp FreeBSD coreteam member
[EMAIL PROTECTED] "Real hackers run -current on their laptop."
FreeBSD -- It will take a long time before progress goes too far!
To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message
