Subject: Re: disabling source routing and ip-forwarding in netbsd-current?
To: Netbsd maildrop <netbsd@virtual.cuc.ab.ca>
From: matthew green <mrg@mame.mu.oz.au>
List: current-users
Date: 04/08/1995 00:46:09
i use darren reeds packet filter.  you can get it from

ftp://coombs.anu.edu.au:/pub/net/kernel/ip_fil2.5.1.tar.gz

it works great!  i use these sorts of rules:

plode ~# ipfstat -i
block in on ppp0 proto tcp from any to any port = 53
block in on ppp0 proto tcp/udp from any to any port = 2049
block in on ppp0 proto tcp/udp from any to any port = 111
[ ... ]

really easy to configure and install, too.

highly recommended!

.mrg.