On 11-04-29 12:08 AM, pavel pocheptsov wrote:
pass in on $int_if inet proto udp from any to $int_if port tftp
You do have a pass out rule in pf, right?I'm assuming you have a default block in place somewhere, and since TFTP uses UDP, pf won't create a state so you'll need an explicit pass out.
-- http://blog.sarlok.com/ Sometimes all the left hand needs to know is where the right hand is, so it knows where to point the blame.

