Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 30 Nov 2012 13:09:43 +0100
From:      Fleuriot Damien <ml@my.gd>
To:        Laszlo Danielisz <laszlo_danielisz@yahoo.com>
Cc:        freebsd-pf@freebsd.org
Subject:   Re: pfctl -s rules
Message-ID:  <B7DB5F01-CEE3-45E2-A79C-3C6EDC1FCB57@my.gd>
In-Reply-To: <21296179F7C744CE89529A0027FBE9DA@yahoo.com>
References:  <49BF4308335C496593D1D7C82391C805@yahoo.com> <FE4E0127-F5A8-49C4-9BE3-814DAC35329A@my.gd> <21296179F7C744CE89529A0027FBE9DA@yahoo.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Okay kindly paste:


# pfctl -vnf /etc/pf.conf

Let's see if your rules show up.


If that works, try # pfctl -f /etc/pf.conf

Be aware this will should load your rules and enable them, be careful =
not to cut yourself off.

If this works, a likely explanation is that pf tried to load rules at =
boot and failed for some reason (interface not created at the time, for =
example).


Also post:
# grep pf /etc/rc.conf



On Nov 30, 2012, at 1:06 PM, Laszlo Danielisz =
<laszlo_danielisz@yahoo.com> wrote:

> Nothing is displayed=20
>=20
> ktulu# pfctl -nf /etc/pf.conf
> ktulu#=20
>=20
> --=20
> Laszlo Danielisz
> Sent with Sparrow
>=20
> On 2012 November 30 Friday at 12:02 PM, Fleuriot Damien wrote:
>=20
>>=20
>> On Nov 30, 2012, at 12:00 PM, Laszlo Danielisz =
<laszlo_danielisz@yahoo.com> wrote:
>>=20
>>> Hi Everybody,
>>>=20
>>> Recently I've discover the following issues: I can't display my =
firewalls rules, and the firewall is enabled.
>>> Take a look what is happening:
>>>=20
>>> ktulu# pfctl -s rules
>>> No ALTQ support in kernel
>>> ALTQ related functions disabled
>>> ktulu# pfctl -e
>>> No ALTQ support in kernel
>>> ALTQ related functions disabled
>>> pfctl: pf already enabled
>>>=20
>>> ktulu# uname -a
>>> FreeBSD ktulu.danielisz.eu 8.3-RELEASE-p3 FreeBSD 8.3-RELEASE-p3 #0: =
Mon Jun 11 23:52:38 UTC 2012 =
root@i386-builder.daemonology.net:/usr/obj/usr/src/sys/GENERIC i386
>>>=20
>>>=20
>>>=20
>>> Do you have any idea why I can not see them?
>>>=20
>>> Thx!
>>> Laszlo
>>=20
>>=20
>>=20
>> Actually, I believe you can see your rules, all the 0 of them.
>>=20
>> Try pfctl -nf /etc/pf.conf
>>=20
>> See if you have an error when loading the rules, that would explain =
it all.
>=20




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?B7DB5F01-CEE3-45E2-A79C-3C6EDC1FCB57>