It has often been said that having a filter list for both the in AND out
side of the IP in a router is desirable (for obvious reasons).
In writing some filter software myself, for SunOS 4, I'm pondering the
wisdom of having 3 filter lists:
* inbound
* outbound
* general
A packet going in would then be applied against the inbound and general
and one going out would be checked against the outbound and general lists.
Does this seem excessive (ie complicating this issue too much) ? If not,
which order would people prefer - the "general" list being checked before
or after the `direction' specific list ?
Darren
|
|
