i suppose alternative would be to,

 --- set require-order yes
 +++ set require-order no

and put some

 block quick <ip-black>

BEFORE those rdr's  ... to prevent those addresses in <ip-black> from
ever seeing the redirection in the first place (which is probably
better anyway).

BUT, i've heard tell that disabling require-order can have its own set
of 'surprises' ...
_______________________________________________
freebsd-pf@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to