From owner-freebsd-questions@FreeBSD.ORG Sat Apr 30 13:12:08 2005 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 928D316A4CE for ; Sat, 30 Apr 2005 13:12:08 +0000 (GMT) Received: from webmail-outgoing.us4.outblaze.com (webmail-outgoing.us4.outblaze.com [205.158.62.67]) by mx1.FreeBSD.org (Postfix) with ESMTP id 5E59B43D1D for ; Sat, 30 Apr 2005 13:12:08 +0000 (GMT) (envelope-from fteg@london.com) Received: from unknown (unknown [192.168.9.180])4CA4C180013A for ; Sat, 30 Apr 2005 13:12:08 +0000 (GMT) X-OB-Received: from unknown (205.158.62.49) by wfilter.us4.outblaze.com; 30 Apr 2005 13:12:08 -0000 Received: by ws1-1.us4.outblaze.com (Postfix, from userid 1001) id 3E2714BEAD; Sat, 30 Apr 2005 13:12:08 +0000 (GMT) Content-Type: text/plain; charset="iso-8859-1" Content-Disposition: inline Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Received: from [213.187.181.70] by ws1-1.us4.outblaze.com with http for fteg@london.com; Sat, 30 Apr 2005 08:12:08 -0500 From: "Fafa Diliha Romanova" To: bob@a1poweruser.com, questions@freebsd.org Date: Sat, 30 Apr 2005 08:12:08 -0500 X-Originating-Ip: 213.187.181.70 X-Originating-Server: ws1-1.us4.outblaze.com Message-Id: <20050430131208.3E2714BEAD@ws1-1.us4.outblaze.com> Subject: RE: Please help me with PF (thanks) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 30 Apr 2005 13:12:08 -0000 Hello Bob! Actually, yeah. Strange ... I guess it's a BIND issue then. But my BIND setup has been running flawlessly for months now. I haven't committed any changes to my configuration since it stopped working. Nothing in /var/log ... Thanks, -- Fafa ----- Original Message ----- From: bob@a1poweruser.com To: "Fafa Diliha Romanova" , questions@freebsd.org Subject: RE: Please help me with PF (thanks) Date: Sat, 30 Apr 2005 08:06:49 -0400 >=20 > Simple question, do problems 1, 2, & 3 still happen when you comment > out the pf statements in rc.conf and run with out a firewall? >=20 > -----Original Message----- > From: owner-freebsd-questions@freebsd.org > [mailto:owner-freebsd-questions@freebsd.org]On Behalf Of Fafa Diliha > Romanova > Sent: Saturday, April 30, 2005 7:51 AM > To: questions@freebsd.org > Subject: Please help me with PF (thanks) >=20 >=20 >=20 > Hello! >=20 > Problems: >=20 > 1. BIND stops workin after a while > 2. I cannot establish SSH connections > 3. I cannot FTP to certain sites > 4. PF crashes my computer on FTP uploads >=20 > So I'm seeking solutions to these problems. > And maybe ways to SIMPLIFY my pf.conf: >=20 > ----------------------------- >=20 > int_if=3D"ep0" > ext_if=3D"lnc0" >=20 > # *** Options > # > set block-policy drop >=20 > # *** Scrub incoming packets > # > scrub in all >=20 > # *** NAT > # > nat on $ext_if from $int_if:network to any -> ($ext_if) > rdr on $int_if proto tcp from any to any \ > port 21 -> 127.0.0.1 port 8021 >=20 > # *** Default deny policy > # > block drop log all >=20 > # *** Pass loopback traffic > # > pass quick on { lo0 $int_if } >=20 > # *** Outgoing > # > pass out on $ext_if inet proto { tcp, udp, icmp } \ > from ($ext_if) to any keep state >=20 > # *** Bootstrap > # > pass out on $ext_if inet proto udp \ > from any port 68 to any port 67 keep state >=20 > # *** DNS and NTP > # > pass out on $ext_if inet proto udp \ > from ($ext_if) to any port { 53, 123 } keep state >=20 > # *** SSH, HTTP and Ident > # > pass in on $ext_if inet proto tcp \ > from any to ($ext_if) port { 22, 80, 113 } flags S/SA keep > state >=20 > # *** Active FTP > # > pass in on $ext_if inet proto tcp \ > from port 20 to ($ext_if) user proxy flags S/SA keep state >=20 > ----------------------------- >=20 > Thank you all so much! > -- Fafa >=20 > -- > ___________________________________________________________ > Sign-up for Ads Free at Mail.com > http://promo.mail.com/adsfreejump.htm >=20 > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to > "freebsd-questions-unsubscribe@freebsd.org" --=20 ___________________________________________________________ Sign-up for Ads Free at Mail.com http://promo.mail.com/adsfreejump.htm