Subject: Re: New NetBSD user - using ipfilter
To: Manuel Bouyer <email@example.com>
From: Michael Graff <firstname.lastname@example.org>
Date: 01/20/2001 11:56:43
Manuel Bouyer <email@example.com> writes:
> pass out on ppp0 all keep state
> block in on ppp0 all
> Because outgoing connections have been recorded by the first rule,
> they're not blocked by the second.
> Now, with this you'll only have TCP connections working. You may
> want to let UDP and ICMP pass in, so that ping and DNS works.
UDP keeps state too...