nanog mailing list archives

Re: Blocking Internet Gaming


From: Brian Wallingford <brian () meganet net>
Date: Sun, 6 Jan 2002 21:58:40 -0500 (EST)


:Doesn't that cause trouble with occasionally blocking ephemeral ports?
:If you're not allowing incoming connections of any kind (including
:non-PASV FTP) it shouldn't matter, but blocking ports above 1024
:always makes me nervous...

That's what "permit tcp any any established" is for.

cheers,
brian


Current thread: