* N.J. Thomas <njt at ayvali.org> [2015-04-30 12:07:06-0400]: > pass in on fxp0 from 10.0.0.0/8 > block in on fxp0 from 10.1.2.3 > > This would pass in everything on 10.8, but block packets from 10.1.2.3. Typo, I mean 10/8. Thomas