pf block question
Matt Rechkemmer
tiberius at trancell.org
Tue Jun 7 06:44:16 GMT 2005
So, at the very top of my pf "filter" rules, I have these rules:
block drop in quick on fxp0 inet proto icmp from 1.3.3.7 to any
block drop in quick on fxp0 inet proto tcp from 1.3.3.7 to any
1.3.3.7 is a made up IP address ;-). Even with this rule present, pf allows
traffic from the IP through. I guess I'm a bit confused as to why it isn't
being dropped. Since it has the "quick" keyword, shouldn't that take
precedence over all other filter rules?
Any ideas?
--
Matt Rechkemmer
tiberius at trancell.org
More information about the freebsd-questions
mailing list