[3629] in linux-net channel archive
Re: Default Forwarding Policies
daemon@ATHENA.MIT.EDU (Leonard N. Zubkoff)
Thu Jul 11 09:17:17 1996
Date: Mon, 1 Jul 1996 08:08:50 -0700
From: "Leonard N. Zubkoff" <lnz@dandelion.com>
To: jos@xos.nl
Cc: linux-net@vger.rutgers.edu, Linus.Torvalds@cs.helsinki.fi
In-Reply-To: <199607010845.KAA18906@minnie.xos.nl> (message from Jos Vos on
Mon, 1 Jul 1996 10:45:17 +0200 (MET DST))
From: Jos Vos <jos@xos.nl>
Date: Mon, 1 Jul 1996 10:45:17 +0200 (MET DST)
About the window during the boot phase: as long as you put the
ipfwadm commands _before_ the ifconfig commands (which is possible,
even using device names, etc.), there is no serious risk (except when
ipfwadm crashes, but even that could be catched by checking the
default policy before doing the ifconfig commands).
Good point. I didn't realize it was legal to install the firewall rules before
ifconfig was executed.
Leonard
