[prev in list] [next in list] [prev in thread] [next in thread] 

List:       ipfilter
Subject:    Re: Question about keep state
From:       Darren Reed <darrenr () reed ! wattle ! id ! au>
Date:       2003-06-19 15:00:58
[Download RAW message or body]

In some email I received from S.Booth, sie wrote:
> 
> Can IPF keep state successfully if packets for a particular session 
> come in on a different interface from the one used by outgoing packets.
> 
> I suspect that this is really not a good idea and I should avoid any
> network design that requires this but i would still like to know the
> answer.

IPFilter will support each of the 4 directions that a connection has
packets going through a firewall. being different 

pass in on le0,le1 out-via ppp0,hme0 from ...

Darren
[prev in list] [next in list] [prev in thread] [next in thread]