that's why we always do block log all pass on $int pass out on $ext from ($ext) to any keep state
Wouldn't this pass all packets, rendering the ``block log all'' useless?
What you're saying is true IFF your only interfaces are $int and $ext. ifconfig -a
Mike
-- ---------------------------------------- Michael H. Semcheski ---------------------------------------- GPG Public Key available at: http://www.nedyah.org/[EMAIL PROTECTED] ----------------------------------------
