first firewall with pf

Dave Feustel dfeustel at mindspring.com
Tue Mar 24 09:24:22 PDT 2009


On Tue, Mar 24, 2009 at 06:47:40PM +0300, Eric Magutu wrote:
> does the rule to block all other traffic have to be explicitly mentioned?
> 
> On Tue, Mar 24, 2009 at 6:27 PM, Eric Magutu <emagutu at gmail.com> wrote:
> 
> > Thanks I'll change that
> >
> >
> > On Tue, Mar 24, 2009 at 6:20 PM, Glen Barber <glen.j.barber at gmail.com>wrote:
> >
> >> On Tue, Mar 24, 2009 at 10:47 AM, Eric Magutu <emagutu at gmail.com> wrote:
> >> [snip]
> >> >
> >> > ##########################
> >> > #block all other traffic #
> >> > ##########################
> >> >
> >> > # should be last rule
> >> >
> >> > block in quick on $ext_if all

Change this rule to
block in on $ex_if all 
and then make it the first rule.
The word 'quick' says don't evaluate any more rules if this matches.


More information about the freebsd-pf mailing list