xmailx wrote:
Algum tempo atras testei a sintaxe do ipfw limit src-addr N

Se eu estiver usando keep state nao posso usar em conjunto a opcao limit

Portanto, minhas regras dinamicas vao pro vinagre, confere?

Nao confiro, mas se for verdade, por que voce n�o coloca o check-state DEPOIS de limit src-addr?


;-)


xmailx





-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Antonio Torres Sent: Tuesday, August 19, 2003 5:47 PM To: Grupo Brasileiro de Usuarios FreeBSD Subject: Re: [FUGSPBR] libera��o de conex�o median te a utentica�a� de usu�rio


At 13:40 19/8/2003, you wrote:


Isso � muito interessante, mas como funcionaria? Tenho duas classes C,

teria


que colocar mais de 500 regras no firewall :( ?


`man ipfw` ....

ipfw add pass ip from 192.168.1.0/24 to any limit src-addr 5`

cria uma "regra" para cada src-addr por voce ...



[]s
Antonio Torres
[EMAIL PROTECTED]


_______________________________________________________________ Sair da Lista: http://www2.fugspbr.org/mailman/listinfo/fugspbr Historico: http://www4.fugspbr.org/lista/html/FUG-BR/

---

Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.511 / Virus Database: 308 - Release Date: 18/08/2003

---

Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.511 / Virus Database: 308 - Release Date: 18/08/2003


_______________________________________________________________ Sair da Lista: http://www2.fugspbr.org/mailman/listinfo/fugspbr Historico: http://www4.fugspbr.org/lista/html/FUG-BR/

--


Jonny

--
Jo�o Carlos Mendes Lu�s - Networking Engineer - [EMAIL PROTECTED]
--
"the West won the world not by the superiority of its ideas or values
or religion but rather by its superiority in applying organized
violence. Westerners often forget this fact, non-Westerners never do."
-- Samuel P. Huntington

_______________________________________________________________
Sair da Lista: http://www2.fugspbr.org/mailman/listinfo/fugspbr
Historico: http://www4.fugspbr.org/lista/html/FUG-BR/

Responder a