> > --- BEGIN RULES --- > > pass in quick on dmfe0 proto tcp from any to <firewall> port = 80
Try pass in quick on dmfe0 proto tcp from any to <firewall> flags S/SA keep state > pass in quick on dmfe0 proto udp from any to <firewall> port = 80 Not sure why you want to allow UDP traffic to the HTTP port ... > pass out quick on dmfe1 proto tcp from <webserver> to any port = 80 Supposing that you want to give a user on "webserver" HTTP acces to the rest of the the net, try pass out quick on dmfe1 proto tcp from <webserver> to any port = 80 flags S/SA keep state But if you just want to allow HTTP traffic out from your webserver, that'll be taken care of by the above "pass in ... flags S/SA keep state" rule, so this one is unnecessary. > pass out quick on dmfe1 proto udp from <webserver> to any port = 80 See the above comment for the other UDP rule. David S. > > block in all > block out all > > --- END RULES --- >
