On Mon, Feb 23, 2009 at 10:09:36PM -0600, kevin thompson wrote:
> I'm a lurker on this mailing list, and I'm no master of pf, but I think the
> problem is that your block statement comes before all of your pass
> statements.  In most firewall configurations, rules are processed until one
> matches and then no others are processed.  So if the first rule that matches
> your packets is block everything and log it then that is all you will get.
> Try moving your block statement to the end of the pf.conf file.

The only thing worse than no advice is wrong advice.  If you don't know
pf, please don't speak up.

P.S.  To the OP, please don't listen to this.  I'll reply shortly.

Thanks,

-- 
Jason Dixon
DixonGroup Consulting
http://www.dixongroup.net/

Reply via email to