Mike Tancsa <m...@sentex.net> writes: > Is [scrub in all] the only pf option that will work, or is scrub > fragment reassemble sufficient ?
"fragment reassemble" is implicit, but if you leave out "in" it will also scrub outgoing traffic, which is wasteful. DES -- Dag-Erling Smørgrav - d...@des.no _______________________________________________ freebsd-security@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-security To unsubscribe, send any mail to "freebsd-security-unsubscr...@freebsd.org"
