Hi,

here is a screenshot of my rules (because of the nice format)

http://tinypic.com/jj0n4n.png

( if tinypic is down, try this:
   http://xs.to/xs.php?f=ipf.png&h=xs62&d=06011 )


There is not one rule defined for ex1.

But why do I get this..

$ cat /var/log/messages
(...)
Jan  1 21:53:53 phoebe dhcpd: DHCPDISCOVER from 00:14:a8:05:27:84 via 
ex1: network 10.1.1.0/24: no address pool
(...)

.."via ex1"?


If I haven't totally misunderstood something, dhcpd shouldn't be able to 
get DHCPDISCOVER if the only matching rule is: 'block in all'.


Thank you very much & kind regards,

Petar