Re: ipfw's "me" keyword

2003-06-10 Thread Andre Guibert de Bruet
On Tue, 10 Jun 2003, Dan Nelson wrote: > In the last episode (Jun 11), Andre Guibert de Bruet said: > > > > Now I realize that the broadcast address doesn't match the network > > card's IP address, which is why the packet isn't getting matched. But > > do we really want this behavior? Don't broad

Re: ipfw's "me" keyword

2003-06-10 Thread Dan Nelson
In the last episode (Jun 11), Andre Guibert de Bruet said: > Hi, > > I've been fooling around a bit with IPFW2 and I came across interesting > behavior with regards to the "me" keyword. It appears as if smb broadcasts > (UDP 137,138) do not get matched when denying packets with a rule similar > to