Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 29 Mar 2007 00:13:33 +0300
From:      KES <kes-kes@yandex.ru>
To:        freebsd-pf@freebsd.org
Subject:   pf BUG?
Message-ID:  <868144293.20070329001333@yandex.ru>

next in thread | raw e-mail | index | archive | help
Hello

I start to use ADSL
My net work has next sturcture:
CPU -iIP----  rl0 -SERVER -tun0---  >>>>> INET

I have next pf rules

1) drop all
2) pass in quick on tun0 all
3) pass out quick on tun0 all
4) pass in on rl0 from $iIp to any
5) pass out on rl0 from any to $iIp

Next thing is wrong:
If I ping inet from CPU

2) pass in log-all on tun0 all
3) pass out quick on tun0 all

tpcdump pflog0 shows nothing
But
2) pass in on tun0 all
3) pass out log-all quick on tun0 all

tpcdump pflog0 shows in and out traffic on tun0 interface!!!

System was builded from 2007-03-27 sources
architecture is sparc64





Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?868144293.20070329001333>