Subject: Re: New IP filter code
To: Jonathan Stone <jonathan@dsg.stanford.edu>
From: Jason Thorpe <thorpej@nas.nasa.gov>
List: tech-security
Date: 04/01/1997 17:46:57
On Tue, 01 Apr 1997 17:34:09 -0800 
 Jonathan Stone <jonathan@DSG.Stanford.EDU> wrote:

 > t's how it  worked in ip_fil 2.8.2 through 3.1.whatever.
 > 'm still running a couple of pre-integration versions.
 > 
 > 
 > >What you can do, however, to get the semantics you want, is to put:
 > >
 > >        /sbin/ipf -E
 > >
 > >first in /etc/rc.
 > 
 > 
 > No, that's **not** the semantics I want.  Do you really not see the
 > difference?

you said you wanted the previous behavior.  According to what you've
told me here, the previous "in-tree integrated ipfilter" behavior
is NOT what you want.

Jason R. Thorpe                                       thorpej@nas.nasa.gov
NASA Ames Research Center                               Home: 408.866.1912
NAS: M/S 258-6                                          Work: 415.604.0935
Moffett Field, CA 94035                                Pager: 415.428.6939