Malo by tam byt nieco taketo pass out quick on em0 all keep state
Presne si uz nepamatam, je to uz nejaka chvila co som ipfilter pouzival, ale keep state tam urcite nemoze chybat. Viac na http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/firewalls-ipf.html :) Tomas. On Mon, 31 May 2010 02:30:07 +0200 (CEST), Kane <mo...@seznam.cz> wrote: > Zbynku to je dobry napad: > Mam to takto: > > block in on em0 all > > pass in quick on lo0 all > pass out quick on lo0 all > > pass in log quick on em0 proto icmp from any to 192.168.184.128/24 > > pass in log quick on em0 proto xns-idp from any to 192.168.184-128/24 > > > ted resim hlavne tu vec, "aby system prijal odpovedi na odchozi pozadavky" > to vubec nevim jak udelat.. -- FreeBSD mailing list (users-l@freebsd.cz) http://www.freebsd.cz/listserv/listinfo/users-l
