Re: PF problems

Previous thread: OpenCON 2007 thanks by fabioFVZ on Wednesday, December 5, 2007 - 7:13 am. (4 messages)

Next thread: Re: A necessary evil: snmpd(8) and snmpctl(8) by Jason George on Wednesday, December 5, 2007 - 8:32 am. (2 messages)
From: Kleber Rocha
Subject: PF problems
Date: Wednesday, December 5, 2007 - 8:02 am

I have the following rule in pf.
pass in quick from 10.1.100.210 to any

Here the result of pfctl -sr
pass in quick inet from 10.1.100.210 to any flags S/SA keep state

But the connection is being blocked by pf, follows log of pflog0:
Dec 02 06:58:58.343862 rule 0/(match) [uid 0, pid 23271] block in on
bge1: 10.1.100.210.8080 > 10.1.1.78.4899: S [tcp sum ok]
423727301:423727301(0) win 16384 <mss 1360,nop,nop,sackOK> (DF) (ttl
111, id 54108, len 48)

This ip 10.1.100.210 is my proxy server, This network this in vlan0.

My rule is being ignored and the connection is being blocked by the
default block rule:
block in log all

But these rules work well in OpenBSD 4.0

From: Stuart Henderson
Date: Wednesday, December 5, 2007 - 8:20 am

See the 4.0 -> 4.1 upgrade guide.

Previous thread: OpenCON 2007 thanks by fabioFVZ on Wednesday, December 5, 2007 - 7:13 am. (4 messages)

Next thread: Re: A necessary evil: snmpd(8) and snmpctl(8) by Jason George on Wednesday, December 5, 2007 - 8:32 am. (2 messages)