Subject: Re: New NetBSD user - using ipfilter
To: Manuel Bouyer <>
From: Michael Graff <>
List: tech-net
Date: 01/20/2001 11:56:43
Manuel Bouyer <> writes:

> pass out on ppp0 all keep state
> block in on ppp0 all
> Because outgoing connections have been recorded by the first rule,
> they're not blocked by the second.
> Now, with this you'll only have TCP connections working. You may
> want to let UDP and ICMP pass in, so that ping and DNS works.

UDP keeps state too...