Re: ipf "keep state" rules, tftpd and inetd

[Robert Swindells <rjs%fdy2.co.uk@localhost>]

>>> The solution is to not use tftp across a firewall.
>>
>>As I'm running ipf on every server, to protect sensitive ports from
>>traffic from untrusted nets, this is not an option.
>
>Create a trusted net or don't use tftp.

Or...

There does seem to be a tftp proxy in ipf, so follow the instructions
for setting up an FTP proxy but substitute tftp/udp for ftp/tcp.