Date: Fri, 20 Oct 2017 09:15:05 +1100 (EST) From: Dave Horsfall <dave@horsfall.org> To: FreeBSD PF List <freebsd-pf@freebsd.org> Subject: Had to allow localhost->localhost on FB 10.4 Message-ID: <alpine.BSF.2.21.1710200910430.30357@aneurin.horsfall.org>
next in thread | raw e-mail | index | archive | help
Just upgraded to FreeBSD 10.4 (and NTP stopped working, but that's a
separate issue), and found that my pf log was flooded with things like:
00:03:25.172691 IP localhost.56537 > localhost.domain: 33908+[|domain]
00:03:30.650949 IP localhost.51150 > localhost.domain: 13457+[|domain]
00:03:35.669987 IP localhost.47363 > localhost.domain: 7594+[|domain]
00:03:54.528312 IP localhost.18250 > localhost.domain: 96+[|domain]
00:03:59.830324 IP localhost.15552 > localhost.domain: 45957+[|domain]
00:04:04.845808 IP localhost.47042 > localhost.domain: 24817+[|domain]
00:04:10.689009 IP localhost.30385 > localhost.domain: 28807+[|domain]
00:04:12.398079 IP localhost.37872 > localhost.domain: 56445+[|domain]
00:04:16.474337 IP localhost.48196 > localhost.domain: 9865+[|domain]
00:04:17.943754 IP localhost.10177 > localhost.domain: 38494+[|domain]
00:04:22.132642 IP localhost.23265 > localhost.biff: UDP, length 15
I was forced to add the following entry in pf.conf until I could investigate
this further:
# Stuffed if I know why localhost/UDP is now blocked by default...
pass in quick from localhost to localhost
Anyone else noticed this?
--
Dave Horsfall DTM (VK2KFU) "Those who don't understand security will suffer."
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?alpine.BSF.2.21.1710200910430.30357>