On 07.05.2004 10:10 -0600, Kevin Williams wrote:
> I've finally discovered the source of my DMZ problem. There is a
> rule "@17 block in log quick proto tcp from any to any" that comes
> before all my rules to allow traffic in/out of my DMZ.
That's most likely not the problem, as the rule that precedes it is
"skip 1 in proto tcp from any to any flags S/FSRA". It is there to
make sure that all new TCP sessions start with a SYN.