Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 27 Apr 2007 11:47:21 -0700
From:      snowcrash <schneecrash+pf@gmail.com>
To:        "Jon Simola" <jsimola@gmail.com>
Cc:        freebsd-pf@freebsd.org
Subject:   Re: why are pf-blocked ips 'leaking' thru to spamd?
Message-ID:  <70f41ba20704271147r566a99d3od45bd04fac484373@mail.gmail.com>
In-Reply-To: <70f41ba20704271143i962a7d3r821ddd34a4409f53@mail.gmail.com>
References:  <70f41ba20704271105m11fa5315kc7c3d715f2d63f61@mail.gmail.com> <8eea04080704271127g70d910bfg82ec652a0c6889bf@mail.gmail.com> <70f41ba20704271143i962a7d3r821ddd34a4409f53@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
i suppose alternative would be to,

  --- set require-order yes
  +++ set require-order no

and put some

  block quick <ip-black>

BEFORE those rdr's  ... to prevent those addresses in <ip-black> from
ever seeing the redirection in the first place (which is probably
better anyway).

BUT, i've heard tell that disabling require-order can have its own set
of 'surprises' ...



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?70f41ba20704271147r566a99d3od45bd04fac484373>