On Tue, Feb 24, 2009 at 9:48 PM, Hilco Wijbenga <hilco.wijbe...@gmail.com> wrote: > 2009/2/23 Jason Dixon <ja...@dixongroup.net>: >> ########################################################## >> 00 ext_if = "sk0" >> 01 int_if = "sk1" >> 02 >> 03 set skip on lo >> 04 >> 05 scrub in >> 06 >> 07 nat on $ext_if from $int_if:network to any -> ($ext_if:0) >> 08 >> 09 block in log all >> 10 pass in on $int_if inet keep state
# I think you are missing a pass out on $ext_if rule 11 pass out on $ext_if w/o 11 all inbound packets are blocked by 09. --patrick
