On Thu, 2007-03-15 at 15:32 +0000, Stuart Henderson wrote:
> On 2007/03/15 10:25, Ryan Corder wrote:
> > On Thu, 2007-03-15 at 01:39 +0000, Stuart Henderson wrote:
> > > feed the rule into "pfctl -nvf -" and see how it's expanded.
> >
> > basically what you would expect...
>
> > pass out on bge0 from <inside> to ! <outside> ...
> > pass out on bge0 from <inside> to ! <llcidr> ...
>
> i.e.
>
> pass out to everyone-apart-from-outside
> pass out to everyone-apart-from-llcidr
>
> This blocks only the intersection of outside and llcidr
> (probably nobody).

ok, so I want:

    pass out to everyone-except-from-outside
    pass out to everyone-except-from-llcidr

would that be:

    pass out on bge0 from <inside> to { any, !<outside>, !<llcidr> }

--
Ryan Corder <[EMAIL PROTECTED]>
Systems Engineer, NovaSys Health LLC.
501-219-4444 ext. 646

[demime 1.01d removed an attachment of type application/pgp-signature which had 
a name of signature.asc]

Reply via email to