On Thu, 10 Jul 1997, Wailer wrote:
> Why has the default changed to 'block all' when ipf is enabled?
> ipf -E; default no-match -> block all
> 
> it certainly wasn't doing this before I compiled a new kernel in early 
> july.

A new version of ipfilter got imported... I think the default was 'block
all' for only a day or two... it's back to pass all now:

/*      $NetBSD: fil.c,v 1.14 1997/07/08 05:54:02 mrg Exp $     */

(And it looks like if you prefer the default to be 'block all', you can do
'options IPFILTER_DEFAULT_BLOCK')
-- 
Name: Dave Huang     |   Mammal, mammal / their names are called /
INet: khym@bga.com   |   they raise a paw / the bat, the cat /
FurryMUCK: Dahan     |   dolphin and dog / koala bear and hog -- TMBG
Dahan: Hani G Y+C 21 Y++ L+++ W- C++ T++ A+ E+ S++ V++ F- Q+++ P+ B+ PA+ PL++