stan <[EMAIL PROTECTED]> writes: > I finally scraped all that I had done, and stared over, and finally > came up with something that was working enough that I could at least > put it in place, at the cost of reduced functionality.
We've all gone through this. Most of us set up our firewalls w/o having to bother the list. You learn more that way. Easiest to start from scratch. My pf.conf has a couple of macros and only 11 rules, starting with block drop log all pass quick on lo0 all A couple of these handle special cases like my imap server wanting to tell me it's lost mailbox lock....or Opera wanting to access its ad server (I've come to like those context specific ads...) > I started asking specific questions about specific problems, and >mostly what I got from the list was abuse, and then this ***%$# >person starts personnel attacks on me. > > **l of a way t run a railroad IMHO! This ain't a railroad. RTFM. You haven't asked for anything that isn't documented. You're not trying to do anything sophisticated. Read your logs. Revise your rules. Read your logs. Understand. Aside from the official docs, just picking from my bookmarks, no guarantee they're up to date: http://www.muine.org/~hoang/openpf.html http://www.drones.com/obsd-fw.html http://www.openbsdjournal.org/pf-howto/ http://www.benzedrine.cx/pf.html If you want it spelled out, buy a copy of Absolute OpenBSD. It's got about 70 pages on pf. You ought to pay for handholding. -- KBK
