[EMAIL PROTECTED] wrote: > add 10510 allow icmp from any to any out via oif() keep-state
I don't think ICMP is stateful :) You need both in and out rules for ICMP because the logical responses to packets can't be reliably connected into a single communication.
signature.asc
Description: OpenPGP digital signature
