# echo "no rdr pass from <ip-black> to any" | pfctl -vvnf-
stdin:1: "pass" not valid with "no"

that's a nifty way to check. thanks!

Maybe you want to tag those packets and block them later:

no rdr on em2 proto tcp from { <spamd>, !<ip-black> } to em2 port smtp
tag BLOCKME
...
block quick tagged BLOCKME

i'd gotten thru LABELs, but not to TAGs yet.  excellent.

much easier that iptables!  still keep tryin' to do things
bass-ackwards & the hard-way. ;-)

thanks for the help/education & hagw!
_______________________________________________
freebsd-pf@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to