Re: [m0n0wall] default ruleset

From:	Adam Nellemann <adam at nellemann dot nu>
To:	Thomas Hertz <term at cynisk dot net>
Cc:	m0n0wall at lists dot m0n0 dot ch
Subject:	Re: [m0n0wall] default ruleset
Date:	Fri, 28 May 2004 20:56:54 +0200

Thomas Hertz wrote:
> You can see for yourself using "ipfstat -o" in the exec.php that this is so.
> 
> $ ipfstat -o
> pass out quick on lo0 from any to any
> pass out quick on sis1 proto udp from 192.168.0.1/32 port = 67 to any port =
> 68
> pass out quick on sis0 proto udp from any port = 68 to any port = 67
> pass out quick on sis1 from any to any keep state
> pass out quick on sis0 from any to any keep state
> pass out quick on sis2 from any to any keep state
> block out log quick from any to any
> 
> The same goes for "ipfstat -i", for inwards.

So your'e saying that the LAN interface IS blocked by a default rule? 
(Since I see a "block in log quick from any to any" at the bottom of 
my ipfstat -i output.)


Adam.