[prev in list] [next in list] [prev in thread] [next in thread] 

List:       ipfilter
Subject:    Re: return-rst for outgoing tcp connections?
From:       Wolf Geldmacher <wolf.geldmacher () ubs ! com>
Date:       2006-08-09 7:00:18
Message-ID: 44D98802.3060204 () ubs ! com
[Download RAW message or body]


Jett Tayer wrote:

> Hi Wolf,
> make you have no previous rule above similar to this one:
> pass out on $ext_if proto tcp all keep state
> Jett
>
> On 08 8, 06, at 10:03 PM, Wolf Geldmacher wrote:
>
>> Hi,
>>
>> I've been using ipfilter for some time now and it has been working for
>> me quite nicely.
>>
>> That said, I currently have a problem with ipfilter that I don't  
>> know how
>> to solve (and yes, I checked the FAQ, the manual pages, googled,  
>> a.s.o.):
>>
>> I need to *reject* (not drop) outgoing TCP connections on a Solaris  
>> 8 box
>> and I seem to be unable to figure out how to do this up to the  point 
>> where I
>> doubt that it is possible at all. 
>
I don't have such a rule (the original post had the complete IPF 
configuration).

[prev in list] [next in list] [prev in thread] [next in thread]