Port-xen archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: IPFilter and Xen



Manuel Bouyer <bouyer%antioche.eu.org@localhost> wrote:

> But I don't use much "keep state" (actually I avoids it as much as possible).

As far as I understand, they ensure that ICMP traffic related to
authorized TCP/UDP data can get back through. Do you just allow all
ICMP?

-- 
Emmanuel Dreyfus
http://hcpnet.free.fr/pubz
manu%netbsd.org@localhost


Home | Main Index | Thread Index | Old Index