ipf我写的规则不管用。

cls

ipf我写的规则不管用。
一个网卡。绑定2个网段，同一个交换机上。如何阻止2个网段通信？
pass in on vr2 from 10.0.1.0/28 to any keep state
block in quick on vr2 from 10.0.1.0/28 to 10.0.2.0/29 keep state
block in quick on vr2 from 10.0.1.0/28 to 192.168.68.0/24 keep state

写了这个还是不行