Re: src/etc/rc.firewall simple ${fw_pass} tcp from any to

R. B. Riddick napsal/wrote, On 11/11/06 20:00:
>> But I was scared, not undertstand what the established bit did, &
>> how easily an attacker might fake something, etc.
....
>> Should I still be worrying about 	established ?

> Hmm... I personally use "check-states" and "keep-state", so that it is not

	Statefull rules can stop the sophisticated intruder, but are often more 
vulnerable to DoS attacks.

	Every method has pros and cons ...

					Dan

	

-- 
Dan Lukes                                   SISAL MFF UK
AKA: [e-mail], [e-mail],[e-mail]
_______________________________________________
[e-mail] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "[e-mail]"