> However, if
> I comment out the PF rule "block in all" then suddenly I can ping
> yahoo.com. Why will my server not resolve names (like
> yahoo.com) if the
> "block in all" statement exists? Why does that statement mess it up?
> What am I missing? Please help because I am totally frustrated.
>
>
>
> block in all
The default block rule should always have logging enabled, no exceptions.
It should be
block log all
The pf logs would have told you straight away what was being dropped and
why.
On a side note,
The default block rule should match both ingress and egress traffic.
A system cannot be deemed secure it if implictly allows egress traffic to
flow.
Greg
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
