From owner-freebsd-security@FreeBSD.ORG Fri Jan 22 09:59:40 2010 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 376851065692 for ; Fri, 22 Jan 2010 09:59:40 +0000 (UTC) (envelope-from lolo@agneau.org) Received: from bergerie.agneau.org (bergerie.agneau.org [88.173.248.15]) by mx1.freebsd.org (Postfix) with ESMTP id EDC1B8FC1A for ; Fri, 22 Jan 2010 09:59:39 +0000 (UTC) Received: by bergerie.agneau.org (Postfix, from userid 500) id 7E55073803; Fri, 22 Jan 2010 10:39:55 +0100 (CET) Date: Fri, 22 Jan 2010 10:39:55 +0100 From: Laurent Frigault To: kalin m Message-ID: <20100122093955.GA44733@obelix.bergerie.agneau.org> References: <4B5958E2.9010509@el.net> MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-15 Content-Disposition: inline In-Reply-To: <4B5958E2.9010509@el.net> X-Powered-By: UUCP User-Agent: Mutt/1.5.20 (2009-06-14) Cc: freebsd-security@freebsd.org Subject: Re: pf rules X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Jan 2010 09:59:40 -0000 On Fri, Jan 22, 2010 at 02:50:58AM -0500, kalin m wrote: > doing testing with pf... > > how is it possible that if i have these rules below in pf.conf if i do: > telnet that.host.org 25 > > i get: > Trying xx.xx.xx.xx... > Connected to that.host.org. > Escape character is '^]'. > ........... etc ....... > > > pf.conf contetns: ... > set skip on lo .... You are in a jail and/or that.host.org is a local ip routed via lo0 ? -- Laurent Frigault |