PF firewall rules

Kian Mohageri kian.mohageri at gmail.com
Tue Jul 11 06:48:47 UTC 2006


On 7/10/06, Michael Vince <mv at thebeastie.org> wrote:
>
> Dmitry Andrianov wrote:
> So to block to block IP 192.168.1.17 from connecting *out* to anything
> on the internet I have to use a "block in" statement and there is no
> other way of doing this rule?
> block in quick on $int_if proto { tcp, udp, icmp } from 192.168.1.17 to
> any



I'm not sure if I'm understanding you correctly, but if having the direction
in the rule is confusing to you, you can leave it out:

block quick on $int_If proto { tcp, udp, icmp } from 192.168.1.17 to any


More information about the freebsd-pf mailing list