Blocking Internet Gaming

Brian Wallingford brian at meganet.net
Mon Jan 7 02:58:40 UTC 2002


:Doesn't that cause trouble with occasionally blocking ephemeral ports?
:If you're not allowing incoming connections of any kind (including
:non-PASV FTP) it shouldn't matter, but blocking ports above 1024
:always makes me nervous...

That's what "permit tcp any any established" is for.

cheers,
brian




More information about the NANOG mailing list