Help with IP Filter 4.1.8

[Roman Serbski]

On 2/27/06, Giorgos Keramidas <keramida at ceid.upatras.gr> wrote:
> One reason why this could fail is that the xl0 interface is not part of
> the route to your ISP's DNS servers.
>
> How many interfaces does the system have?  Is xl0 in the path to your
> ISP's router?

There are two interfaces - xl0 and xl1 with no cable connected to xl1.
gateway_enable is not defined in rc.conf so is off.
I can successfully access ISP's DNS both if I disable ipf or configure
ifp to 'pass in all'.