CVSROOT: /cvs Module name: src Changes by: ha...@cvs.openbsd.org 2013/02/13 16:11:14
Modified files:
etc : pf.conf
Log message:
Add a 'block' rule prior to the state creating 'pass' rule. This
way, TCP packets of e.g. timed out states are blocked rather than
passed by the implicit default pass rule.
sthen@ benno@ phessler@ mikeb@ agrees
