On Tue, Feb 24, 2009 at 9:48 PM, Hilco Wijbenga
<hilco.wijbenga@gmail.com> wrote:
quoted text
> 2009/2/23 Jason Dixon <jason@dixongroup.net>:
>> ##########################################################
>> 00 ext_if = "sk0"
>> 01 int_if = "sk1"
>> 02
>> 03 set skip on lo
>> 04
>> 05 scrub in
>> 06
>> 07 nat on $ext_if from $int_if:network to any -> ($ext_if:0)
>> 08
>> 09 block in log all
>> 10 pass in on $int_if inet keep state

# I think you are missing a pass out on $ext_if rule
11 pass out on $ext_if

w/o 11 all inbound packets are blocked by 09.

--patrick