Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 11 Feb 2005 21:23:11 -0800
From:      Jon Simola <jsimola@gmail.com>
To:        Anthony Chavez <acc@anthonychavez.org>
Cc:        freebsd-pf@freebsd.org
Subject:   Re: pf + kldload
Message-ID:  <8eea040805021121233c040991@mail.gmail.com>
In-Reply-To: <m28y5uz9hv.fsf@pegasos.local>
References:  <m28y5uz9hv.fsf@pegasos.local>

next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, 11 Feb 2005 21:29:32 -0700, Anthony Chavez
<acc@anthonychavez.org> wrote:

> However, pfctl shows that no packet evaulations are being performed and
> thus, no packets are being dropped.

On a wild guess (because I had two techs brain-o this one for 6 hours)
have you done "pfctl -e" to turn on pf?

ipfw twiddles the sysctls when it's loaded and starts filtering
immediately, but pf requires manually turning it on. You can load
rulesets and test them for valid syntax without running pf (part
feature, part skill-testing question).

-- 
Jon Simola


Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?8eea040805021121233c040991>