ipf firewall questions

[Andrew Smith]

I'm using ipf as my firewall, and I can't figure out why OWA is being blocked going to 172.20.0.11.  Below is the current config file which works.  But if I removed the fourth line, my users can't access OWA externally.  I would have thought the lines: pass out quick from 172.20.0.0/24 to any keep state and pass in quick from any to 172.20.0.0/24 would have superceded the line block out log proto tcp from any to any port = 80.

Any suggestions would be helpful.

Andrew

--------------------------------------------------------------------

#
# Permit Outlook Web Access
#
pass in quick proto tcp from any to 172.20.0.11 port = 80 keep state 

#
# Allow All College Traffic
#
pass in quick from 10.0.0.0/8 to any
pass out quick from any to 10.0.0.0/8

#
# Permit all Network Critical Machines Access
#
pass out quick from 172.20.0.0/24 to any keep state
pass in quick from any to 172.20.0.0/24

#
# Permit all Network Teacher/Staff Computers Access
#
pass out quick from 172.20.1.0/24 to any keep state
pass in quick from any to 172.20.1.0/24

#
# Block all Network Traffic from Student Used Computers
#
block out quick from 172.20.2.0/24 to any
block in quick from any to 172.20.2.0/24

#
# Block all Network Traffic from Student Owned Computers
#
block out quick from 172.20.3.0/24 to any
block in quick from any to 172.20.3.0/24

#
# Block any other Port 80 or 443 Access
#
block out log proto tcp from any to any port = 80
block out log proto tcp from any to any port = 443