pf creates state by default. By pinging other hosts, you are creating state that allows the replies back in.
Edit: http://www.openbsd.org/faq/pf/filter.html#state
__________________
The only dumb question is a question not asked.
The only dumb answer is an answer not given.
Last edited by robbak; 23rd October 2008 at 08:57 AM.
|