Help with IP Filter 4.1.8

[Giorgos Keramidas]

On 2006-02-27 16:50, Giorgos Keramidas <keramida at ceid.upatras.gr> wrote:
> It looks like the stateful rule didn't succeed in creating a state for
> the outgoing UDP packet:
>
>     pass out quick on lo0 from any to any
>     pass out quick on xl0 proto tcp from any to any port = domain flags S/FSRPAU keep state
> =>  pass out quick on xl0 proto udp from any to any port = domain keep state
>     block out log quick on xl0 all
>
> I'm not sure why this would happen though.

One reason why this could fail is that the xl0 interface is not part of
the route to your ISP's DNS servers.

How many interfaces does the system have?  Is xl0 in the path to your
ISP's router?