On Wed, Feb 25, 2009 at 8:05 PM, Rod Whitworth <glis...@witworx.com> wrote: > Now there is a difference. In case you missed it - I used "pass out" > not "pass out on $ext_if" but that make no difference, in fact as I > pointed out earlier there is no "block out" for anything in the ruleset > so you can remove the "pass out" line entirely.
how are the states for your outbound traffic getting created if you did not have a 'pass out' rule? --patrick