To all,

If I say:

block in quick on em0 from 83.0.0.0/8 to any

That should block all protocols, right?  I've got this rule enabled, but
I received an ICMP packet from an address within this block.

My rule structure is 
--------------------------------------
Pass in quick on <local interface>
Pass in quick on <internal interface>
Block in quick on <external interface> <offending addresses block>
...
Pass in quick <valid traffic>
...

My environment is 
--------------------------------------
OS: FreeBSD v. 4.10-RELEASE
IPFILTER: v. 4.1.3
External Interface: em0

Any thoughts would be appreciated,

Matthew Lee


Reply via email to