From owner-freebsd-questions@FreeBSD.ORG Tue Jun 7 06:44:16 2005 Return-Path: X-Original-To: questions@freebsd.org Delivered-To: freebsd-questions@FreeBSD.ORG Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 1B12416A41C for ; Tue, 7 Jun 2005 06:44:16 +0000 (GMT) (envelope-from tiberius@sdf.lonestar.org) Received: from sdf.lonestar.org (mx.freeshell.org [192.94.73.21]) by mx1.FreeBSD.org (Postfix) with ESMTP id BA5AE43D1F for ; Tue, 7 Jun 2005 06:44:15 +0000 (GMT) (envelope-from tiberius@sdf.lonestar.org) Received: from sdf.lonestar.org (IDENT:tiberius@sverige.freeshell.org [192.94.73.4]) by sdf.lonestar.org (8.13.1/8.12.10) with ESMTP id j576hNE3009236 for ; Tue, 7 Jun 2005 06:43:23 GMT Received: (from tiberius@localhost) by sdf.lonestar.org (8.13.1/8.12.8/Submit) id j576hN0o005155 for questions@freebsd.org; Mon, 6 Jun 2005 23:43:23 -0700 (MST) Date: Mon, 6 Jun 2005 23:43:23 -0700 From: Matt Rechkemmer To: questions@freebsd.org Message-ID: <20050607064323.GA29038@sdf.lonestar.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.4.2.1i Cc: Subject: pf block question X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 07 Jun 2005 06:44:16 -0000 So, at the very top of my pf "filter" rules, I have these rules: block drop in quick on fxp0 inet proto icmp from 1.3.3.7 to any block drop in quick on fxp0 inet proto tcp from 1.3.3.7 to any 1.3.3.7 is a made up IP address ;-). Even with this rule present, pf allows traffic from the IP through. I guess I'm a bit confused as to why it isn't being dropped. Since it has the "quick" keyword, shouldn't that take precedence over all other filter rules? Any ideas? -- Matt Rechkemmer tiberius@trancell.org