Re: OpenBSD PF problems.

On Wed, Mar 23, 2005 at 08:52:43AM +0800, F Walls wrote:

Hi Frankie.

> block drop in quick on $ext_if from $private_networks to any
> block drop out quick on $ext_if from any to $private_networks

As far as i know is "drop" default. You can write "block in quick ..."

> pass in on $ext_if proto udp from any to $udpserver port { 6666:7000, 29200 } 
> pass in on $int_if proto udp from any to $udpserver port { 6666:7000, 29200 } 

Try: 
pass in quick on $ext_if proto udp from any to $udpserver port { 6666:7000, 
29200 } keep state

> pass in on $int_if from $int_if:network to any keep state
> pass out on $int_if from any to $int_if:network keep state
> pass out on $ext_if proto tcp all modulate state flags S/SA
> pass out on $ext_if proto {udp, icmp} all keep state
> pass out on $ext_if proto esp all keep state

so long 
Marco
-- 
ech`echo xiun|tr nu oc|sed 'sx\([sx]\)\([xoi]\)xo un\2\1 is xg'`ol


--------------------------------------------------------------------------
FREE Download - The Future in Desktop Firewalls is Available Now
 
NEW NetOp Desktop Firewall, the world's first driver-centric 
firewall software - protecting your laptops and corporate PCs at  
ring-zero! NetOp features sophisticated process & application
control, centralized management and multiple network user profiles -
NetOp is able to increase security when mobile users plug back 
into your network. Step into a more secure future - Try it FREE
http://www.securityfocus.com/sponsor/CrossTec_firewalls_050315
--------------------------------------------------------------------------