On 2009 January 24 03:09:57 pm Pereresus ne Vlezaet Buggy wrote: > Add "set skip on lo". Searching for the right place of this string will > be your homework.
Thanks much. My working pf.conf now contains: vvv=========pf.conf===========vvv ## MACROS tcp_services = "{ ssh, smtp, smtps, domain, www, auth, pop3s, ftp, sftp, https, imaps }" udp_services = "{ domain, pop3, pop3s, imaps }" # KDE uses loopback set skip on lo0 ## DEFAULT: DENY external access; OK going out block in all pass out proto tcp to any port $tcp_services pass proto udp to any port $udp_services pass out inet proto icmp all icmp-type 8 code 0 ^^^=========E O F===========^^^ Cheers, -KenD