From owner-freebsd-questions@FreeBSD.ORG Tue Jun 7 12:12:40 2005 Return-Path: X-Original-To: questions@freebsd.org Delivered-To: freebsd-questions@FreeBSD.ORG Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 2586216A41C for ; Tue, 7 Jun 2005 12:12:40 +0000 (GMT) (envelope-from john@day-light.com) Received: from joseph.day-light.net (209-145-160-141.accessus.net [209.145.160.141]) by mx1.FreeBSD.org (Postfix) with ESMTP id D7AED43D1D for ; Tue, 7 Jun 2005 12:12:39 +0000 (GMT) (envelope-from john@day-light.com) Received: from w1 (unknown [10.1.5.36]) by joseph.day-light.net (Postfix) with SMTP id 907E44F3E2; Tue, 7 Jun 2005 07:12:38 -0500 (CDT) From: "John Brooks" To: "Matt Rechkemmer" , Date: Tue, 7 Jun 2005 07:12:43 -0500 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.6604 (9.0.2911.0) Importance: Normal In-Reply-To: <20050607064323.GA29038@sdf.lonestar.org> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441 Cc: Subject: RE: pf block question X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: john@day-light.com List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 07 Jun 2005 12:12:40 -0000 Are you sure the ruleset is loaded, and pf is enabled? -- John Brooks john@day-light.com > -----Original Message----- > From: owner-freebsd-questions@freebsd.org > [mailto:owner-freebsd-questions@freebsd.org]On Behalf Of Matt Rechkemmer > Sent: Tuesday, June 07, 2005 1:43 AM > To: questions@freebsd.org > Subject: pf block question > > > So, at the very top of my pf "filter" rules, I have these rules: > > block drop in quick on fxp0 inet proto icmp from 1.3.3.7 to any > block drop in quick on fxp0 inet proto tcp from 1.3.3.7 to any > > 1.3.3.7 is a made up IP address ;-). Even with this rule > present, pf allows > traffic from the IP through. I guess I'm a bit confused as to > why it isn't > being dropped. Since it has the "quick" keyword, shouldn't that take > precedence over all other filter rules? > > Any ideas? > > -- > Matt Rechkemmer > tiberius@trancell.org > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to > "freebsd-questions-unsubscribe@freebsd.org" >