> I have > tried the following more specific pass rule above the previous admin rule > : > pass in quick inet proto tcp from <admin_nets> to any port ssh flags S/SAFR > keep > state queue q_admin > > > But that makes no difference.
Is it under testing or production? Is it possible to remove *queue q_admin* from the above rule and see ? -- Thank you Indunil Jayasooriya