On Mon, Feb 23, 2009 at 9:11 PM, patrick keshishian <[email protected]> wrote:

> why all the "quick" stuff? This is supposed to be a very simple set
> up. Granted we don't exactly understand what the OP wants to do, but
> from what I gather, he most likely wants to allow all outbound traffic
> with NAT and everything else gets blocked and logged.
>
> so something to the effect of:
>
> set skip on lo
> scrub in
> nat stuff here ...
> block log
> pass on $int_if ... blah blah blah

# oops
pass out on $ext_if ...

--patrick

Reply via email to