[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
Re: ipfilter: keep state per-interface?
> FYI: from NetBSD's NPF `man 5 npf.conf'
> | Stateful packet inspection is enabled using `stateful' or
> | `stateful-ends' keywords. The former creates a state which is
> | uniquely identified by a 5-tuple (source and destination IP
> | addresses, port numbers and an interface identifier). The latter
> | excludes the interface identifier and must be used with precaution.
Thanks! I guess I'll use it as an excuse to learn some npf :-)
Main Index |
Thread Index |