[ietf78-tech] inbound filtering optimization?

[John Kemp]

The default setup for Captivator does connection tracking
for in -> out traffic, but doesn't allow new connections to
be established out -> in.

My own preference would be to put a default allow for inbound.
If that is OK with everybody, I'd like to do that.  Will make
stuff work for people that need to go that direction, and I don't
see a good reason to filter that direction.  Yes/no?

The outbound traffic would still get the optimization from
the connection tracking, and would still be subject to the
redirection if not authenticated.

?
/jgk