Re: PF blocking even if set to pass all

2007-12-13 Thread Erik Norgaard
RW wrote: On Thu, 13 Dec 2007 21:17:09 +0100 Erik Norgaard <[EMAIL PROTECTED]> wrote: I think it is possible to set a default rule, which for security should be block, which means that any packet that falls through your rule set will be blocked. I'm not aware that there is, the FAQ suggests

Re: PF blocking even if set to pass all

2007-12-13 Thread RW
On Thu, 13 Dec 2007 21:17:09 +0100 Erik Norgaard <[EMAIL PROTECTED]> wrote: > I think it is possible to set a default rule, which for security > should be block, which means that any packet that falls through your > rule set will be blocked. I'm not aware that there is, the FAQ suggests having

Re: PF blocking even if set to pass all

2007-12-13 Thread Erik Osterholm
On Thu, Dec 13, 2007 at 09:19:03AM -0200, Alaor Barroso de Carvalho Neto wrote: > Hi guyz, like I've said in other topic, I'm building a BSD box that'll act > as a gateway between three private networks and the internet. I want that > each private network can ping to each other, and I can do that t

Re: PF blocking even if set to pass all

2007-12-13 Thread Erik Norgaard
Ghirai wrote: On Thu, 13 Dec 2007 09:19:03 -0200 "Alaor Barroso de Carvalho Neto" <[EMAIL PROTECTED]> wrote: Hi guyz, like I've said in other topic, I'm building a BSD box that'll act as a gateway between three private networks and the internet. I want that each private network can ping to each

Re: PF blocking even if set to pass all

2007-12-13 Thread Ghirai
On Thu, 13 Dec 2007 09:19:03 -0200 "Alaor Barroso de Carvalho Neto" <[EMAIL PROTECTED]> wrote: > Hi guyz, like I've said in other topic, I'm building a BSD box that'll act > as a gateway between three private networks and the internet. I want that > each private network can ping to each other, and

PF blocking even if set to pass all

2007-12-13 Thread Alaor Barroso de Carvalho Neto
Hi guyz, like I've said in other topic, I'm building a BSD box that'll act as a gateway between three private networks and the internet. I want that each private network can ping to each other, and I can do that till I activate my pf firewall. When I do pfctl -e it stop working. The output of pfct