"Steven M. Bellovin" wrote:

> Have you checked out the IPfilter "howto", at
> http://www.obfuscation.org/ipf/ipf-howto.txt?  (That link is
> on the NetBSD documentation page.)  I seem to recall that it gave
> some instructions on what to use -- not just
>
>         pass in from any to any
>
> but also (I think)
>
>         pass out from any to any

Yes,  I have read it, and I am reading through it again right now.

Sam