Damien Miller <[EMAIL PROTECTED]> writes:

> Why is setting a "block all" before any interfaces are configured up
> not sufficient?

The original poster's problem is that it looks like the rc scripts on
FreeBSD do not include the PF initialization code which does that.
Probably not terribly hard to fix if you know your way around rcNG.

-- 
Peter N. M. Hansteen, member of the first RFC 1149 implementation team
http://www.blug.linux.no/rfc1149/ http://www.datadok.no/ http://www.nuug.no/
"First, we kill all the spammers" The Usenet Bard, "Twice-forwarded tales"

Reply via email to