> add 10510 allow icmp from any to any out via oif() keep-state

I don't think ICMP is stateful :)

You need both in and out rules for ICMP because the logical responses to
packets can't be reliably connected into a single communication.

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to