Hi Peter, Thanks a lot on the advice. Looks like its working now. cool!
"Peter N. M. Hansteen" <[EMAIL PROTECTED]> wrote: kintaro oe writes: > # no restriction on lan > pass quick on $int_if > # allow icmp incoming/outgoing to wan > pass quick on $ext_if inet proto icmp all Unix traceroutes by default use udp, if you want all-ICMP trace, use the -I option. see eg . > but when i tried adding this in my pf.conf and it works when i traceroute: > pass out on $ext_if inet proto udp all That's a bit too permissive for my taste. Try the rules from the tutorial link and see if they don't fit the bill. -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.datadok.no/ http://www.nuug.no/ "Remember to set the evil bit on all malicious network traffic" delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds. cheers, kintaro Oe --------------------------------- Moody friends. Drama queens. Your life? Nope! - their life, your story. Play Sims Stories at Yahoo! Games.
