On 2009-02-26, ropers <rop...@gmail.com> wrote: > And I think that's why a "pass out" rule > would be unnecessary, as the default is to pass packets.
Watch out with this; the implicit "pass" rule is not "pass out keep state", it is "pass out NO STATE".