ipf rules question
norgaard at locolomo.org
Tue Jul 28 14:35:16 UTC 2009
Erik Norgaard wrote:
> Jay Hall wrote:
>> And, following is the output from ipfstat showing the relevant rule(s).
>> @140 block in quick proto tcp from 220.127.116.11/8 to any port = smtp
> Evidently, things get passed by some other rule, you can get a clue by
> adding the log action to all rules passing packets to port 25 or any port.
And, by the way in ip-filter it is a really good idea to add a default
rule explicitly, always specify network interface and use groups to
organize and optimize your ruleset.
Ph: +34.666334818/+34.915211157 http://www.locolomo.org
More information about the freebsd-questions