Re: Two minor IPFW-related questions

2008-07-29 Thread Giorgos Keramidas
On Mon, 28 Jul 2008 20:48:09 -0700, "Ronald F. Guilmette" <[EMAIL PROTECTED]> wrote: >On Mon, 28 Jul 2008 18:15:32 -0700, "Ronald F. Guilmette" <[EMAIL PROTECTED]> >wrote: >> deny any to any in frag >> >> Is that actually a Good Thing To Do? Are there really no legitimate >> packate frag

Re: Two minor IPFW-related questions

2008-07-28 Thread Ronald F. Guilmette
In message <[EMAIL PROTECTED]>, Giorgos Keramidas <[EMAIL PROTECTED]> wrote: >On Mon, 28 Jul 2008 18:15:32 -0700, "Ronald F. Guilmette" <[EMAIL PROTECTED] >om> wrote: >> Just a couple of questions about IPFW-related things: >> >> 1) Somewhere the other day I read a recommendation... which looked

Re: Two minor IPFW-related questions

2008-07-28 Thread Giorgos Keramidas
On Mon, 28 Jul 2008 18:15:32 -0700, "Ronald F. Guilmette" <[EMAIL PROTECTED]> wrote: > Just a couple of questions about IPFW-related things: > > 1) Somewhere the other day I read a recommendation... which looked > rather official to me that the time... that all fragments should be > firwalled out,

Two minor IPFW-related questions

2008-07-28 Thread Ronald F. Guilmette
Just a couple of questions about IPFW-related things: 1) Somewhere the other day I read a recommendation... which looked rather official to me that the time... that all fragments should be firwalled out, e.g. thusly: deny any to any in frag Is that actually a Good Thing To