I don't consider myself to be an expert but I think I have set up the right configuration for our internal network to surf while blocking all unwanted incoming/outgoing. Every once in a while I see a ack or ack/psh package from a.b.c.d:80 to internal:>1024.
I don't know if our users are bothered with this as I never hear anything. How can I easily accept these packages or shouldn't I?
(important) rules are:
from service to action
localnet {internet} any allow
localnet any WAN allow
WAN any localnet allow
any any broadcast8/32 drop
any any any deny
{internet} contains dns, http & https
[ 08 March 2002: Message edited by: adminVMW ]
This thread was automatically locked due to age.
