On Thu, 2007-03-15 at 15:32 +0000, Stuart Henderson wrote: > On 2007/03/15 10:25, Ryan Corder wrote: > > On Thu, 2007-03-15 at 01:39 +0000, Stuart Henderson wrote: > > > feed the rule into "pfctl -nvf -" and see how it's expanded. > > > > basically what you would expect... > > > pass out on bge0 from <inside> to ! <outside> ... > > pass out on bge0 from <inside> to ! <llcidr> ... > > i.e. > > pass out to everyone-apart-from-outside > pass out to everyone-apart-from-llcidr > > This blocks only the intersection of outside and llcidr > (probably nobody).
ok, so I want: pass out to everyone-except-from-outside pass out to everyone-except-from-llcidr would that be: pass out on bge0 from <inside> to { any, !<outside>, !<llcidr> } -- Ryan Corder <[EMAIL PROTECTED]> Systems Engineer, NovaSys Health LLC. 501-219-4444 ext. 646 [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]