pf block question

Matt Rechkemmer tiberius at trancell.org
Tue Jun 7 06:44:16 GMT 2005


So, at the very top of my pf "filter" rules, I have these rules:

block drop in quick on fxp0 inet proto icmp from 1.3.3.7 to any
block drop in quick on fxp0 inet proto tcp from 1.3.3.7 to any

1.3.3.7 is a made up IP address ;-).  Even with this rule present, pf allows
traffic from the IP through.  I guess I'm a bit confused as to why it isn't
being dropped.  Since it has the "quick" keyword, shouldn't that take
precedence over all other filter rules?

Any ideas?

--
Matt Rechkemmer
tiberius at trancell.org


More information about the freebsd-questions mailing list