View Single Post
Old 25th May 2008
erehwon erehwon is offline
Port Guard
Join Date: May 2008
Location: Cascadia
Posts: 34

Originally Posted by robbak View Post

(What this message really says is, "Uh, What you say??")
When I adopt the rule to
block in quick on $ext_if from <bogons>
, I can no longer manage my server from within the LAN (ssh is blocked), same result as the rule without naming $ext_if.

So, what I'd like is the protection of banning bogons from the outside internet, but leave my server free for ssh internally on the LAN (because I don't have a console) -- I don't want to remove the 192.168.*.* entry as any kind of 'fix', but I'm stumped here.
Reply With Quote