On Fri, 2 Jan 2004, Falcor wrote:

>I am assuming by "out" you mean from the LAN to the WAN.  Where ever
>"in" is, the rule is the same just change the source network.  E.g. LAN,
>WAN, PPTP, OPT1, etc.
>

This is probably the crux of a misunderstanding..

By out I mean out on a specific interface.

with ipfilter you can filter inbound and outbound on an interface. Inbound
is when a packet arrives at that interface, outbound is when a packet
leaves that interface. As I understand it anyway.

I do _not_ mean 'out of my network', or 'in to my network'.

See : http://www.obfuscation.org/ipfilter/ipf-howto.html#TOC_12


>IPF and OpenBSD's PF allow you to muck with ICMP services, but I do not
>believe 99.99% of us want to dork with it at all.

I prefer to block everything in ICMP but a couple of essential types
usually.