From owner-freebsd-questions  Wed Dec 18  5: 0:46 2002
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 7077237B401
	for <freebsd-questions@freebsd.org>; Wed, 18 Dec 2002 05:00:45 -0800 (PST)
Received: from cactus.fi.uba.ar (cactus.fi.uba.ar [157.92.49.108])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 5EDD443E4A
	for <freebsd-questions@freebsd.org>; Wed, 18 Dec 2002 05:00:44 -0800 (PST)
	(envelope-from fgleiser@cactus.fi.uba.ar)
Received: from cactus.fi.uba.ar (cactus.fi.uba.ar [157.92.49.108])
	by cactus.fi.uba.ar (8.12.3/8.12.3) with ESMTP id gBID0aa1047565;
	Wed, 18 Dec 2002 10:00:36 -0300 (ART)
	(envelope-from fgleiser@cactus.fi.uba.ar)
Date: Wed, 18 Dec 2002 10:00:36 -0300 (ART)
From: Fernando Gleiser <fgleiser@cactus.fi.uba.ar>
To: =?iso-8859-1?q?Keith=20Spencer?= <bsd2000au@yahoo.com.au>
Cc: fbsd <freebsd-questions@freebsd.org>
Subject: Re: More..Re: ipf -> IPFILTER_DEFAULT_BLOCK ...This is not working
 as predicted! Help?
In-Reply-To: <20021218021732.83180.qmail@web12002.mail.yahoo.com>
Message-ID: <20021218095655.V52840-100000@cactus.fi.uba.ar>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
X-Spam-Status: No, hits=-103.4 required=5.0
	tests=IN_REP_TO,SUBJ_ENDS_IN_Q_MARK,PLING,USER_IN_WHITELIST
	version=2.31
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

On Wed, 18 Dec 2002, Keith Spencer wrote:

> Hi again,
> OK what I meant was apart from having changed an
> interface (tun0 not ed0) the ruleset is identical. And
> the rule set works! It dials out  everything...It only
> works iff the default_block option is not active.
> As you can see quick is there. So how can it be that I
> do exactly what Marty S does and no one else reports
> hassles with it? Any clues Fer et al?

Yes. First: send *the rules file YOU are using*, to the one you used as a
base and then modified.

Second: answer all the questions I made in an earlier mail and post them.

Third: post the output of 'ifconfig -a', 'ipfstat -hio'


			Fer


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message