i suppose alternative would be to, --- set require-order yes +++ set require-order no
and put some block quick <ip-black> BEFORE those rdr's ... to prevent those addresses in <ip-black> from ever seeing the redirection in the first place (which is probably better anyway). BUT, i've heard tell that disabling require-order can have its own set of 'surprises' ... _______________________________________________ freebsd-pf@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-pf To unsubscribe, send any mail to "[EMAIL PROTECTED]"