# [EMAIL PROTECTED] / 2002-12-17 10:32:40 -0300:
> On Tue, 17 Dec 2002, Keith Spencer wrote:
> > Marty Schlacter is obviously the man. I am following his firewall
> > tute religiously but I am doing something wrong!
> > I have an ipf.rules EXACTLY like his. Works a treat...but only if I
> > remove the kernel ipfilter_default_block option.
> > If it is in there...it blocks way too well.
> > Everything.
> > What is going on here or has Marty got it all wrong?
>
> Are you using the 'quick' keyword? If you don't, ipf uses a last-match
> checking, and the last rule is 'block all'
>
> See the IPF HOWTO for details.
right. the url: http://www.obfuscation.org/ipf/ipf-howto.html
--
If you cc me or remove the list(s) completely I'll most likely ignore
your message. see http://www.eyrie.org./~eagle/faqs/questions.html
To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message
