Re: How to support QUIC with ipfw

2021-04-12 Thread Matt Joras
Hi Michael, On Sun, Apr 11, 2021 at 2:27 PM Michael Sierchio wrote: > > On Sun, Apr 11, 2021 at 2:20 PM Matt Joras wrote: > > > Hi Michael, > > > > On Sun, Apr 11, 2021, 1:25 PM Michael Sierchio wrote: > > > >> Hi, all. I noticed my firewall was dropping what seemed to be unsolicited > >> UDP

Re: How to support QUIC with ipfw

2021-04-11 Thread Michael Sierchio
Sadly, no. That would be a great feature. The sysctl setting for dynamic rule lifetime is for all UDP. But since the firewall itself is responsible for most of the DNS and NTP traffic, I can write non-stateful rules for that. The recursive resolver on that port won't respond to outside queries

Re: How to support QUIC with ipfw

2021-04-11 Thread Michael Sierchio
On Sun, Apr 11, 2021 at 2:20 PM Matt Joras wrote: > Hi Michael, > > On Sun, Apr 11, 2021, 1:25 PM Michael Sierchio wrote: > >> Hi, all. I noticed my firewall was dropping what seemed to be unsolicited >> UDP connections from Google and Facebook, but this turned out to be QUIC >> traffic. The tr

Re: How to support QUIC with ipfw

2021-04-11 Thread Matt Joras
Hi Michael, On Sun, Apr 11, 2021, 1:25 PM Michael Sierchio wrote: > Hi, all. I noticed my firewall was dropping what seemed to be unsolicited > UDP connections from Google and Facebook, but this turned out to be QUIC > traffic. The traffic can be initiated by the browser (or other supporting >