So you are saying if I have just one quick statement the last rule
matching i.e. block log all wins? 

Thank you,
Raymond

-----Original Message-----
From: Greg Hennessy [mailto:[EMAIL PROTECTED]
Sent: Saturday, March 11, 2006 4:38
To: Jacob, Raymond A Jr; [email protected]
Subject: RE: Two(2) questions regarding quick and adding rules later.


> 
> All traffic blocked unless I use quick.
> tcpdump -n -e -ttt -r /var/log/pflog
> showed traffic was blocked by the last rule unless I added 
> quick to pass rules.
> I thought the matching rules would have overiden the block rule?

If you don't use quick , the last matching rule wins. 

Make the very 1st rule 

block log all

And delete any non specific blocks further down. 




Greg
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to