OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: pf rules

From: kalin m (kalinel.net)
Date: Fri Jan 22 2010 - 12:23:45 CST


thanks... i was under the impression that if you have everything
blocked the initial syn request will be ignored. it doesn't make sense
otherwise....

Jason V. Miller wrote:
> Others have already given some good feedback (and asked some good
> questions), but:
>
>
>> pass out all keep state
>>
>
> You're allowing out the initial TCP SYN, and creating a state entry for the
> connection here. You should be able to make outgoing connections anywhere
> with this rule.
>
> Once a state entry gets created, the state table will match on the traffic
> for the session, and the rules list won't have to be evaluated.
>
> J.
>
>
_______________________________________________
freebsd-securityfreebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribefreebsd.org"