On 01/05/2006 01:21:06 PM, tim wrote:
hullo,
I have a very simple problem but sadly I'm too brainless to figure it
out.
There's an idiot on our network who refuses to switch off his P2P.
The outward port blocking solution is not a popular one.
Thus, what I want to do is to block out this
On 1/5/06, tim [EMAIL PROTECTED] wrote:
# grr, this bit isn't working
block out quick on $ext_if from $idiot to any
block out quick on $int_if from $idiot to any
Blocking out on $ext_if is done post-NAT after the source IP changes,
so do all the blocking on the internal interface:
block out
# grr, this bit isn't working
block out quick on $ext_if from $idiot to any
wrong interface.
block out quick on $int_if from $idiot to any
wrong direction.
:-)
--Bryan