[ previous ] [ next ] [ threads ]
 
 From:  Vincent Fleuranceau <vincent at bikost dot com>
 To:  m0n0wall at lists dot m0n0 dot ch
 Subject:  Re: [m0n0wall] interfering filter rule
 Date:  Fri, 23 Jul 2004 16:54:42 +0200
> has explicit rules to let these connections pass they are blocked
> because of an automatically generated rule wich is evaluated
> earlier:

> Is this a bug in m0n0wall or am I missing something?

There are hard-coded rules (anti-spoof check for LAN and OPT interfaces)
in m0n0wall that cannot be disabled. Because of the "quick" keyword,
user-defined rules (which come after the anti-spoof check) have no
effect... Not a bug, a design choice. Sorry :-(

Read the code in filer.inc and you'll see why.

-- Vincent