Two(2) questions regarding quick and adding rules later.
Remko Lodder
remko at FreeBSD.org
Sun Mar 12 10:30:01 UTC 2006
Jacob, Raymond A Jr wrote:
> So you are saying if I have just one quick statement the last rule
> matching i.e. block log all wins?
>
> Thank you,
> Raymond
Basically he is saying:
block log all
pass in quick <whatever>
which represents: Block all traffic and log that unless we hit some
other rule that we match. The pass in quick rule will get the matching
packet from the queue and process it. If it does not match the pass in
quick rule it will continue down the queue of rules and if nothing
matches he reverts to the match he had at the top "block log all".
Hope this makes it a bit easier to understand,
Cheers,
Remko
--
Kind regards,
Remko Lodder ** remko at elvandar.org
FreeBSD ** remko at FreeBSD.org
/* Quis custodiet ipsos custodes */
More information about the freebsd-pf
mailing list