On Mon, Dec 12, 2016 at 01:52:22AM -0700, Mirimir wrote: > Sorry about missing the typo in my initial reply. It _was_ an invalid > rule. But accepting lo is necessary with default deny, right? Yes, sorry, you're right. My bad.