20df The FreeBSD Forums - View Single Post - [Solved] IPFW firewall and maybe ng0 problem
View Single Post
  #5  
Old February 28th, 2012, 12:39
RusDyr RusDyr is offline
Junior Member
 
Join Date: Nov 2011
Location: St.Petersburg, Russia
Posts: 78
Thanks: 5
Thanked 8 Times in 8 Posts
Default

Code:
$ipfw add allow all from any to any established         # Keep the existing connections
This rule seems to be totally useless since you doesn't have any dynamic rules (no keep-state/check-state/setup/limit modifiers).

Code:
$ipfw add drop all from any to me
If you haven't got other interfaces than em0 and em1, it's also useless - you have done "allowed from any to me" via interfaces before.

P.S. Just for information - you can use "//" syntax for adding comment directly after rule, so that they will be viewed on # ipfw show output.

Last edited by DutchDaemon; February 29th, 2012 at 01:35.
Reply With Quote
 
0