Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 13 Dec 2007 13:25:35 +0200
From:      Ghirai <ghirai@ghirai.com>
To:        "Alaor Barroso de Carvalho Neto" <alaorneto@gmail.com>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: PF blocking even if set to pass all
Message-ID:  <20071213132535.194adf58.ghirai@ghirai.com>
In-Reply-To: <2949641c0712130319p3da37aeci92987c64516dabef@mail.gmail.com>
References:  <2949641c0712130319p3da37aeci92987c64516dabef@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, 13 Dec 2007 09:19:03 -0200
"Alaor Barroso de Carvalho Neto" <alaorneto@gmail.com> wrote:

> Hi guyz, like I've said in other topic, I'm building a BSD box that'll act
> as a gateway between three private networks and the internet. I want that
> each private network can ping to each other, and I can do that till I
> activate my pf firewall. When I do pfctl -e it stop working.
> 
> The output of pfctl -sr is:
> pass in all
> pass out all
> 
> So I guess it would pass anything, why it isn't happening?
> 
> Hugs,
> Alaor
> _______________________________________________

You need to specify from/to what interface it should pass (if you have more
than one NIC, which i assume you do, since the box is acting as a router).

I suggest you read this tutorial/book: http://www.bsdly.net/~peter/pf.html

It explains what you want to do in detail.

-- 
Regards,
Ghirai.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20071213132535.194adf58.ghirai>