From owner-freebsd-questions@FreeBSD.ORG  Wed Dec 23 18:35:02 2009
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id C3CEE106568D
	for <freebsd-questions@freebsd.org>;
	Wed, 23 Dec 2009 18:35:02 +0000 (UTC)
	(envelope-from mksmith@adhost.com)
Received: from mail-in04.adhost.com (mail-in04.adhost.com [216.211.128.134])
	by mx1.freebsd.org (Postfix) with ESMTP id A93968FC27
	for <freebsd-questions@freebsd.org>;
	Wed, 23 Dec 2009 18:35:02 +0000 (UTC)
Received: from ad-exh01.adhost.lan (exchange.adhost.com [216.211.143.69])
	by mail-in04.adhost.com (Postfix) with ESMTP id 1DED1614F7E;
	Wed, 23 Dec 2009 10:35:02 -0800 (PST)
	(envelope-from mksmith@adhost.com)
X-MimeOLE: Produced By Microsoft Exchange V6.5
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Date: Wed, 23 Dec 2009 10:35:00 -0800
Message-ID: <17838240D9A5544AAA5FF95F8D520316074E766E@ad-exh01.adhost.lan>
In-Reply-To: <83865.62779.qm@web30804.mail.mud.yahoo.com>
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Thread-Topic: afp+pf
Thread-Index: AcqD+wVIEhAwzDtGRS6WlNNxF1sUfgAA0ZyQ
References: <997383.83740.qm@web30806.mail.mud.yahoo.com><942242.34924.qm@web30808.mail.mud.yahoo.com>
	<83865.62779.qm@web30804.mail.mud.yahoo.com>
From: "Michael K. Smith - Adhost" <mksmith@adhost.com>
To: =?iso-8859-1?B?ROFuaWVsaXN6IEzhc3ps8w==?= <laszlo_danielisz@yahoo.com>,
	<freebsd-questions@freebsd.org>
Cc: 
Subject: RE: afp+pf
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 23 Dec 2009 18:35:02 -0000

Hello Danielisz:
>=20
> I'm sending you my pflog captured whiled I try to connect, maybe
> somebody will figure out something:
>=20
>=20
> # tcpdump -i rl0 -n port 548
> tcpdump: verbose output suppressed, use -v or -vv for full protocol
> decode
> listening on rl0, link-type EN10MB (Ethernet), capture size 96 bytes
>=20
> 19:01:31.353245 IP 192.168.1.101.63912 > 192.168.1.1.548: Flags [S],
> seq 721406618, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS =
val
> 206874734 ecr 0,sackOK,eol], length 0
> 19:01:35.358575 IP 192.168.1.101.63912 > 192.168.1.1.548: Flags [S],
> seq 721406618, win 65535, options [mss 1460,sackOK,eol], length 0
>=20

Is your firewall acting as an Appletalk router?  I guess I'm not =
understanding why you are sending AFP to the firewall and not through =
the firewall from host to host.

When you log your block statement and tcpdump the pflog0 interface, are =
you seeing the blocks?

Regards,

Mike