I've bridge + Ipf
xl0 on my internal network
xl1 on my routeur
I've this rules
pass in log quick on xl1 proto icmp from any to 193.56.133.70/32
pass in quick on xl1 proto icmp from any to 193.56.133.200/32
pass in quick on xl0 proto TCP/UDP all keep state
block in log quick on xl1 from any to any
But for pass out the rules pass in quick on xl0 proto TCP/UDP all keep
state is necessary and the word keep state too. The problem is that the
firewall crash with too many state. I've already give this question but no
success ...
|