NetBSD-Docs archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
Re: sample ipf ruleset is incorrect
On Fri, May 02, 2008 at 01:48:56PM +1000, Murray Armfield wrote:
>               # Handle traffic by different rulesets
>               block in  quick on ppp0 all head 1
>               block out quick on ppp0 all head 2
> 
>       The "quick" keyword here will tell ipf to not process any more rules 
> and 
> immediately block the traffic. The quick keyword should be removed so 
> additional rule processing is done.
From ipf.conf:
       [..] If quick is used
       with a head rule, rule processing isn't stopped until it  has  returned
       from processing the group.
So I think the example should work (haven't tested it myself though)
Martin
Home |
Main Index |
Thread Index |
Old Index