Thanks, Aactually the problem was that I was fogetting the -e <filename> argument to pfctl.
At least on 3.5 pfctl does not compaiain, nor does it change the active rules, if you forget this flag. On Sun, Jul 31, 2005 at 10:57:59AM -0700, Allie D wrote: > Try pass in on <if> from... > stan([EMAIL PROTECTED])@Sun, Jul 31, 2005 at 01:36:55PM -0400: > > I'm testing a new set of carp firewalls, and I've created a test network > > off of them on my main network. I've added a route tp this network, but pf > > is droping all packets to it. > > > > I've added rules to pf.conf that look like this: > > > > pass from any to 170.95.106.128/25 > > pass from 170.95.106.128/25 to any > > > > And the packest are still being droped by rule 0 which is: > > > > block log all > > Which is of course above these new rules in pf.com. This is on a 3.5 > > system. > > > > Cany anyone sugest what I'm doing wrong. > > > > -- > > U.S. Encouraged by Vietnam Vote - Officials Cite 83% Turnout Despite > > Vietcong Terror > > - New York Times 9/3/1967 > > > > -- > Allie D. > Allnix,LLC. > http://www.allnix.net > > People are beginning to notice you. Try dressing before you leave the house. > > -- U.S. Encouraged by Vietnam Vote - Officials Cite 83% Turnout Despite Vietcong Terror - New York Times 9/3/1967