From owner-freebsd-bugs@FreeBSD.ORG Sun Jan 9 11:40:30 2005 Return-Path: Delivered-To: freebsd-bugs@hub.freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id A1AF316A4CF for ; Sun, 9 Jan 2005 11:40:30 +0000 (GMT) Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21]) by mx1.FreeBSD.org (Postfix) with ESMTP id 8BD1043D39 for ; Sun, 9 Jan 2005 11:40:30 +0000 (GMT) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.13.1/8.13.1) with ESMTP id j09BeUtj071792 for ; Sun, 9 Jan 2005 11:40:30 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.13.1/8.13.1/Submit) id j09BeURb071791; Sun, 9 Jan 2005 11:40:30 GMT (envelope-from gnats) Date: Sun, 9 Jan 2005 11:40:30 GMT Message-Id: <200501091140.j09BeURb071791@freefall.freebsd.org> To: freebsd-bugs@FreeBSD.org From: "Nick Hale" Subject: Re: kern/75601: ipfilter not allowing SSH to box on FreeBSD 5.3 X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: Nick Hale List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 09 Jan 2005 11:40:30 -0000 The following reply was made to PR kern/75601; it has been noted by GNATS. From: "Nick Hale" To: Cc: Subject: Re: kern/75601: ipfilter not allowing SSH to box on FreeBSD 5.3 Date: Sun, 9 Jan 2005 05:37:46 -0600 It isn't a ruleset issue at this time as the following lines are in the rules (at the top) pass in quick on em0 from to any pass out quick on em0 from any to The ip address in those first couple of rules are my particular IP address and it's still having issues. IPFilter is a top-down first match setup so it should match those rules and allow me in and stuff back out to me. The ruleset on the box is the same exactly as the ruleset we had on the 5.2.1 setup. The only thing that changed was an update was done on everything from 5.2.1 -> 5.3 (both are just the RELENG_x branches, no -current or -stable stuff). Both world and kernel are sync'd (world and kernel were built from the same source within 30 minutes of eachother) and everything was upgraded without a hitch (minus this). Regards, Nick harm@gaming-tv.com