Re: ofilter question

Cassandra Perkins (cassy@loop.com)
Sat, 7 Sep 1996 18:44:51 -0700 (PDT)

I believe once the filter is created, the portmaster denies everything
not explicitly allowed by a filter rule. You want to add the rule:

set filter s1.out 2 permit

This will allow everything else.

Cassandra M. Perkins
The Loop ISC

On Sat, 7 Sep 1996, David S. Yun wrote:

> I was trying to filter out some accesses to several specific hosts from our
> network and did the following in our portmaster IRX:
>
> add filter s1.out
> set filter s1.out 1 deny xxx.xxx.xxx.0/24 207.77.64.5/32
> set s1 ofilter s1.out
> save all
> reset s1
>
> This did not seem to work, it acts as if all the packets are getting
> filtered and we're not able to access the outside network. What am I doing
> wrong?
>
> _/_/ _/ _/
> _/ _/ _/_/ __ _ __o E-Mail: dyun@wcis.com
> _/ _/ _/ _ _`\<,_ Phone: (213) 389-9417
> _/_/ avid _/ un ___(_)/ (_)___ FAX: (213) 389-9416
>