On Fri, Oct 20, 2017 at 12:59:51PM +0200, Markus Rosjat wrote: > ... > block return # block stateless traffic
Hi Markus, here´s another hint: no matter if you want to drop silently or send a return for the dropped packet, you have to tell **on which packet the block action should react** block drop all -or- block return all -or- block all If you have this in your pf.conf and load this ruleset then 'pfctl -sr' will give you a line like: block drop all (or whatever you have in pf.conf)