Date: Mon, 27 Jan 2014 23:20:48 +0400 From: Gleb Smirnoff <glebius@FreeBSD.org> To: Robert Simmons <rsimmons0@gmail.com> Cc: freebsd-pf@freebsd.org Subject: Re: PF in FreeBSD 10.0 Blocking Some SSH Message-ID: <20140127192048.GS66160@FreeBSD.org> In-Reply-To: <CA%2BQLa9D97WytnE2Yiy6VFXDrhcgLcpPGf2zB16urjf2Ms%2BrzFg@mail.gmail.com> References: <CA%2BQLa9D97WytnE2Yiy6VFXDrhcgLcpPGf2zB16urjf2Ms%2BrzFg@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Robert,
On Sun, Jan 26, 2014 at 06:19:34PM -0500, Robert Simmons wrote:
R> Over the course of a few hours there are a handful of SSH packets that
R> are being blocked both in and out. This does not seem to affect the
R> SSH session, and all the blocked packets have certain flags set [FP.],
R> [R.], [P.], [.], [F.]. The following is my ruleset abbreviated to the
R> rules that apply to this problem:
R>
R> ext_if = "en0"
R> allowed = "{ 192.168.1.10 }"
R> std_tcp_in = "{ ssh }"
R> block in log
R> block out log (user)
R> pass in quick on $ext_if proto tcp from $allowed to ($ext_if) port
R> $std_tcp_in keep state
R>
R> Why are those packets being blocked?
Do I understand you correct that the ssh sessions work well, but you
see blocked packets in the pflog?
--
Totus tuus, Glebius.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20140127192048.GS66160>