Hello Joachim, Sorry I could not get on internet the answer from Alexey. Can you please give the URL for this. Also please confirm that there is no kernel parameter to make pf block everything by default.
Thanks in advance murthy Joachim Schipper wrote: > On Mon, Jul 03, 2006 at 05:30:44PM -0700, c.s.r.c.murthy wrote: > >>Hi, >> This seems to be widely discussed problem in openbsd pf. There is no >>kernel parameter that makes the pf to block all packets by default. I >>have searched on the internet and found some discussion taken place in >>2005 regarding this. The discussion concludes no such parameter in >>kernel. Are there any changes done in openbsd latest to have a kernel >>configurable parameter to make pf block packets by default? > > > Alexey already answered this, why do you repost it? > > Joachim [demime 1.01d removed an attachment of type APPLICATION/DEFANGED which had a name of murthy.4807DEFANGED-vcf]