From d258a51a23ea296ef43d8a78cbeb9bd7100af694 Mon Sep 17 00:00:00 2001
From: Andy Fragen <andy@thefragens.com>
Date: Wed, 4 Sep 2013 11:28:03 -0700
Subject: [PATCH] after some research it looks like setting to unreachable
 better than deny

---
 config/action.d/osx-ipfw.conf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/config/action.d/osx-ipfw.conf b/config/action.d/osx-ipfw.conf
index b90a136e..fe0caa2a 100644
--- a/config/action.d/osx-ipfw.conf
+++ b/config/action.d/osx-ipfw.conf
@@ -71,7 +71,7 @@ block = tcp
 #          Common values: deny, unreach port, reset
 # Values:  STRING
 #
-blocktype = deny
+blocktype = unreach port
 
 # Option:  set number
 # Notes.:  The ipset number this is added to.