To all who have replied, Thanks for your assistance. Everything was blocking properly, I just mistakenly thought that ICMP packet got through.
Matt -----Original Message----- From: Gene ENonymous [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 16, 2004 2:29 PM To: [EMAIL PROTECTED] Subject: Re: Blocking syntax >From: "Matthew K. Lee" <[EMAIL PROTECTED]> >block in quick on em0 from 83.0.0.0/8 to any >That should block all protocols, right? I've got this rule enabled, but >I received an ICMP packet from an address within this block. >My environment is >-------------------------------------- >OS: FreeBSD v. 4.10-RELEASE >IPFILTER: v. 4.1.3 >External Interface: em0 Have you verified that any of your rules are working? I use the log statement to see what a rule is doing: block in log quick on em0 from 83.0.0.0/8 to any or just to be really sure it's working, try: block in log quick on em0 Use ipmon -D "my_block.log" to keep track of what ipf is trying to do... Also, NAT rule get processed first, so make sure NAT isn't throwing you a curve. There are some specific configurations for FreeBSD I think (I use NetBSD)... Have you reviewed: http://www.phildev.net/ipf/IPFfreebsd.html THanks, gene
