Quote:
Originally Posted by BSDfan666
The inet/inet6 parameter is used to distinguish between IPv4 and IPv6, it is not in place of in/out.
- If in/out are not specified, the rule matches both inbound and outbound packets.
- If inet/inet6 are not specified, the rule matches both packet families.
|
Thank you! So inet for me (IPv4 yet).
Quote:
Originally Posted by BSDfan666
Just a reminder, if you're using the latest version of OpenBSD/pf, you'll need the second edition of The Book of PF.
|
Thanks. I was very careful about this.
The book is indeed the second version. (using OpenBSD 4.8)
Do you ( or anyone else) find those rules ok? I know I may seem a little hasty but seeing all those log entries somehow scares me.