Re: PF: Blocks my workstation on boot

["Matthew L. Shobe" <mls_(_at_)_shobe_(_dot_)_org>]

On Thu, Apr 21, 2005 at 04:48:31AM -0500, Fafa Diliha Romanova wrote:
> I have to write this command on my server after every reboot to allow
> my workstation to access the Internet through it:
> 
> # pfctl -F a ; pfctl -Nf /etc/pf.conf ; pfctl -sr

This stops all packet filtering, probably not what you want.

> My pf.conf looks like this:
> 
> int_if="ep0"
> ext_if="lnc0"
> 
> # *** Default deny policy
> #
> block   drop log all

Here's the problem. You need to either block only on $ext_if or...

> # *** Pass loopback traffic
> #
> pass    quick on lo0 all

Add a pass rule for $int_if.

The PF User's Guide[1] and pfctl(8) will help.

1. http://www.openbsd.org/faq/pf/index.html