Re: rule order in pf

[j knight <enabled_(_at_)_myrealbox_(_dot_)_com>]

David Newman wrote:
> A pf.conf file includes two rules, in this order:
>
> 0. block log all
> 1. pass in quick log on enc0 from $netB to $netA
>
> pflog says traffic from netB to netA matches rule 0 (so the traffic gets 
> tossed).

Might be a good idea to pass traffic in/out on the physical interface(s) 
as well.

Please provide actual log output next time instead of "paraphrasing" the 
logs.




.joel