From owner-freebsd-pf@FreeBSD.ORG Mon May 9 07:08:29 2011 Return-Path: Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 1780D1065670 for ; Mon, 9 May 2011 07:08:29 +0000 (UTC) (envelope-from ml@my.gd) Received: from mail-ww0-f50.google.com (mail-ww0-f50.google.com [74.125.82.50]) by mx1.freebsd.org (Postfix) with ESMTP id AAC398FC1C for ; Mon, 9 May 2011 07:08:28 +0000 (UTC) Received: by wwc33 with SMTP id 33so5013529wwc.31 for ; Mon, 09 May 2011 00:08:27 -0700 (PDT) Received: by 10.227.28.129 with SMTP id m1mr4825458wbc.20.1304923161076; Sun, 08 May 2011 23:39:21 -0700 (PDT) Received: from [192.168.0.11] (did75-17-88-165-130-96.fbx.proxad.net [88.165.130.96]) by mx.google.com with ESMTPS id z9sm3545462wbx.0.2011.05.08.23.39.07 (version=TLSv1/SSLv3 cipher=OTHER); Sun, 08 May 2011 23:39:07 -0700 (PDT) References: <4DC75E9D.7010806@gmail.com> In-Reply-To: <4DC75E9D.7010806@gmail.com> Mime-Version: 1.0 (iPhone Mail 8A293) Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Message-Id: X-Mailer: iPhone Mail (8A293) From: Damien Fleuriot Date: Mon, 9 May 2011 08:38:58 +0200 To: Michael Cc: "freebsd-pf@freebsd.org" Subject: Re: is pf open by dafault? X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 09 May 2011 07:08:29 -0000 On 9 May 2011, at 05:25, Michael wrote: > Hello, >=20 > Is pf in FreeBSD 8.2-R open by default? So that it is NATing and allows an= ything when it fails to load user provided rules? >=20 > Michael > _______________________________________________ > freebsd-pf@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-pf > To unsubscribe, send any mail to "freebsd-pf-unsubscribe@freebsd.org" It is indeed open by default but it won't nat anything, because you won't ha= ve any nat rules loaded.=