Date: Tue, 24 Mar 2009 11:20:51 -0400 From: Glen Barber <glen.j.barber@gmail.com> To: Eric Magutu <emagutu@gmail.com> Cc: freebsd-pf@freebsd.org Subject: Re: first firewall with pf Message-ID: <4ad871310903240820j50d89ac1xacd732eab8adc55d@mail.gmail.com> In-Reply-To: <e9cb8190903240747k714e6d52p9bc8939189c18c14@mail.gmail.com> References: <e9cb8190903240747k714e6d52p9bc8939189c18c14@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, Mar 24, 2009 at 10:47 AM, Eric Magutu <emagutu@gmail.com> wrote: [snip] > > ########################## > #block all other traffic # > ########################## > > # should be last rule > > block in quick on $ext_if all > > This should not be the last rule. PF implements the rules in a top-down fashion, where the last rule always wins. Without actually loading this ruleset on my own system, it appears this rule will block all incoming / outgoing traffic completely. This rule should be placed above all of your 'pass' rules. -- Glen Barber
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4ad871310903240820j50d89ac1xacd732eab8adc55d>