Yes, the ruleset blocks all packets except www.

># Process all incoming ppp packets on ppp0 with group 100, with the default
for
># this interface to block all incoming.
>#
>block in quick on ppp0 all head 100
>
>If we then wanted to allow people to connect to our WWW server, via ppp0, we
could then just add a rule about WWW. NOTE: only packets which match the above
rule are processed by any group 100 rules.
>
># Allow connections to the WWW server via ppp0.
>#
>pass in quick proto tcp from any to any port = WWW keep state group 100
>
>--reference end
>
>Does the rule "block in quick on ppp0 all head 100" block all packets on
ppp0?
>
>thanks for any help .
>
> 





--http://www.eyou.com
--�ȶ��ɿ��ĵ�������  �����ʼ�  �ƶ���ǩ  ��������  ����洢...����δ��


Reply via email to