On Mon, Aug 28, 2023 at 07:13:29PM +0100, Stuart Henderson wrote: > On 2023/08/28 18:30, Peter J. Philipp wrote: > > Here is my icmp rulesets: > > > > root@stern# grep icmp /etc/pf.conf > > a partial pf.conf fragment is hardly ever enough to debug a ruleset > problem. if a packet doesn't match any rule then it hits the implicit > "pass flags any no state" rule 0.
Sorry Stuart, I missed your message somehow. I pasted my rules to Alexandr privately. It is full of anchors and if he wants contents of the anchors I asked him to ask for more. Going by dhartmei's "don't share rules in public" I'm not going to do that but if you would like a list ask privately. Best Regards, -peter -- Over thirty years experience on Unix-like Operating Systems starting with QNX.
