Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 15 Feb 2012 10:29:28 -0500
From:      Jason Hellenthal <jhell@DataIX.net>
To:        Damien Fleuriot <ml@my.gd>
Cc:        freebsd-pf@freebsd.org
Subject:   Re: Differences in PF between FBSD 8.2 & 9.0?
Message-ID:  <20120215152928.GA23782@DataIX.net>
In-Reply-To: <4F3B76DB.1040301@my.gd>
References:  <D358EEF1F9124D44B25B0ED225C8FDE6356CF7@hydra.dawnsign.com> <4F3B76DB.1040301@my.gd>

next in thread | previous in thread | raw e-mail | index | archive | help


On Wed, Feb 15, 2012 at 10:11:55AM +0100, Damien Fleuriot wrote:
> On 2/15/12 2:22 AM, Doug Sampson wrote:
> > I got bitten by PF when upgrading from 8.2 to 9.0. It refused to allow
> > any incoming mail. I'm using spamd in conjunction with pf. I use a
> > combination of natting along with redirections in conjunction with the
> > normal pass/block rules.
> > 
> 
> Toggle logging on both your default drop rule and your allow mail ones.
> 
> Then tcpdump -nei pflog0 ip and port 465 (or 25, whichever)
> See what rule number matches your packets, then find out what rule that
> is with pfctl -vvvsr
> 

pftop may be of use to you here as well. Fire it up and hit the number 6
to watch for which rules are getting more hits than others.

-- 
;s =;



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20120215152928.GA23782>