Re: Switch for IP forwarding using firewall?

[sailer@sun10.sep.bnl.gov (Tim Sailer)]

In your email to me, Christoph Lameter, you wrote:
> 
> Since my last argument was shot down in cold blood...
> 
> How about include the IP firewalling code in standard debian kernels and
> set the default policy to "deny"? That should hopefully switch off all
> forwarding of ip packets and it would be easy to switch it back on later.
> 
> Simply put
> 
> ipfwadm -F -p deny
> 
> somewhere in the startup files.

Then we'd have to have ipfwtk as part of the base system...

Tim

-- 
 (work) sailer@bnl.gov / (home) tps@buoy.com - http://www.buoy.com/~tps
                "I believe the children are our future. 
               Teach them well and let them lead the way."
  -- George Benson "The Greatest Love of All"
** Disclaimer: My views/comments/beliefs, as strange as they are, are my own.**

--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
debian-devel-REQUEST@lists.debian.org . Trouble? e-mail to Bruce@Pixar.com