NetBSD-Docs archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
Re: sample ipf ruleset is incorrect
On Fri, May 02, 2008 at 01:48:56PM +1000, Murray Armfield wrote:
> # Handle traffic by different rulesets
> block in quick on ppp0 all head 1
> block out quick on ppp0 all head 2
>
> The "quick" keyword here will tell ipf to not process any more rules
> and
> immediately block the traffic. The quick keyword should be removed so
> additional rule processing is done.
From ipf.conf:
[..] If quick is used
with a head rule, rule processing isn't stopped until it has returned
from processing the group.
So I think the example should work (haven't tested it myself though)
Martin
Home |
Main Index |
Thread Index |
Old Index