I'm in the middle of securing an OSX server that is the target of hundreds of automated requests per second from Chinese, Russian and US servers (see: Recovering a server from being an open relay).
ipfw to set up rules that exclude all but local IP requests (i.e. 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16).
What is the difference between setting up
ipfw rules, and implementing similar rules in
As I understand it, the
hosts files affect tcp-wrapped services (so may not be as holistic as
ipfw). Would that also mean that they come after the firewall (so no point in using both)?