Re: pf problem, block .. os Linux

[Joakim Aronius <joakim@aronius.com>]

Thanks Nico, 

I actually got some 'off-list' help and got it working. Most likely it was a 3.4 /etc/pf.os file that i managed to get into my 3.6 system when i copied my rules and table files. (I can swear i made a diff and the file was ok.. but i screwed up somehow.)   

Now its working again, keeping the evil penguins away :) 
(hey, wouldn't that be cool for a poster?)

Cheers,
/Joakim

* Nico Meijer (lists@familiemeijer.org) wrote:
> Hi Joakim,
> 
> Hadn't gotten around to fiddling with this myself before, hence my reply
> coming in late.
> 
> > block drop in log quick on $ext_if proto { tcp, udp } from any os
> > Linux to any port ssh 
> 
> Since I have only one interface in the machine I am testing this on, my
> rule is as follows:
> block in log proto tcp from any os Linux to ($ext_if) port ssh
> 
> The Linux machines I do need to be able to connect to this box are
> allowed just below:
> pass in proto tcp from $linuxssh to ($ext_if) port ssh modulate state
> 
> These two lines are the last two in my (simple) setup. Perhaps you can
> debug your firewall by starting from scratch, enabling one rule at a
> time and analyzing what happens.
> 
> Good luck... Nico