On Wednesday 10 November 2004 01:06 pm, Daniel Hamlin wrote:"the last matching rule wins", but when I use the following pf.conf (on 3.6 GENERIC), my traffic is blocked:
pass all block in on fxp1 from 192.168.0.2 to any pass out on fxp0 from 192.168.0.2 to any
Last matching rule *per**interface*
Even if the kernel routes it out the same interface it arrived on? ;-)
--Jon Radel jon_(_at_)_radel_(_dot_)_com