Hi Michael,
On Sun, Apr 11, 2021 at 2:27 PM Michael Sierchio wrote:
>
> On Sun, Apr 11, 2021 at 2:20 PM Matt Joras wrote:
>
> > Hi Michael,
> >
> > On Sun, Apr 11, 2021, 1:25 PM Michael Sierchio wrote:
> >
> >> Hi, all. I noticed my firewall was dropping what seemed to be unsolicited
> >> UDP
Sadly, no. That would be a great feature. The sysctl setting for
dynamic rule lifetime is for all UDP.
But since the firewall itself is responsible for most of the
DNS and NTP traffic, I can write non-stateful rules for that. The
recursive resolver on that port won't respond to outside queries
On Sun, Apr 11, 2021 at 2:20 PM Matt Joras wrote:
> Hi Michael,
>
> On Sun, Apr 11, 2021, 1:25 PM Michael Sierchio wrote:
>
>> Hi, all. I noticed my firewall was dropping what seemed to be unsolicited
>> UDP connections from Google and Facebook, but this turned out to be QUIC
>> traffic. The tr
Hi Michael,
On Sun, Apr 11, 2021, 1:25 PM Michael Sierchio wrote:
> Hi, all. I noticed my firewall was dropping what seemed to be unsolicited
> UDP connections from Google and Facebook, but this turned out to be QUIC
> traffic. The traffic can be initiated by the browser (or other supporting
>
Hi, all. I noticed my firewall was dropping what seemed to be unsolicited
UDP connections from Google and Facebook, but this turned out to be QUIC
traffic. The traffic can be initiated by the browser (or other supporting
software) or the server. The problem is that dynamic rules generally don't
c
