Re: A question on pf rules

On 2/20/07, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > > Greetings, > > Does it make any difference if I group my rules like this . > ## logs smtp sessions > pass in log on $ext_if proto tcp to $mailhost port smtp keep state > ## Pass all outgoing traffics > pass out on $ext_if inet proto t

Re: A question on pf rules

On Tue, 2007-02-20 at 07:32 -0800, [EMAIL PROTECTED] wrote: > Greetings, > > Does it make any difference if I group my rules like this . it can be, depending on your situation. PF rules are read top to bottom, therefore, lower rules can "override" rules that were previously defined. if you w

A question on pf rules

Greetings, Does it make any difference if I group my rules like this . ## logs smtp sessions pass in log on $ext_if proto tcp to $mailhost port smtp keep state ## Pass all outgoing traffics pass out on $ext_if inet proto tcp all flags S/SA keep state pass out log on $ext_if inet proto tcp from