In article <Pine.NEB.4.61.0412221451150.194@irina.net.flo>, Florian Stoehr <netbsd@wolfnode.de> writes: > Basically, this is > > block in all > block out all > pass out quick on sip0 all keep state There must be a "pass in ..." rule or it cannot work. Kind regards -- Matthias Scheler http://scheler.de/~matthias/