infoomatic wrote: > it seems you skipped the firewall part of the document you were > referring, you need NAT connections.
Indeed I did, because I thought if I said `pass in log (all)`, all traffic would be allowed to pass. It seems like I have a lot to learn... With this pf.conf I can reach the internet: $ cat /etc/pf.conf match in all scrub (no-df random-id max-mss 1440) match out on egress inet from !(egress:network) to any nat-to (egress:0) pass out quick inet Thank you for taking the time to bother with my noobish question!
