Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 26 Jan 2014 18:19:34 -0500
From:      Robert Simmons <rsimmons0@gmail.com>
To:        freebsd-pf@freebsd.org
Subject:   PF in FreeBSD 10.0 Blocking Some SSH
Message-ID:  <CA%2BQLa9D97WytnE2Yiy6VFXDrhcgLcpPGf2zB16urjf2Ms%2BrzFg@mail.gmail.com>

next in thread | raw e-mail | index | archive | help
Over the course of a few hours there are a handful of SSH packets that
are being blocked both in and out. This does not seem to affect the
SSH session, and all the blocked packets have certain flags set [FP.],
[R.], [P.], [.], [F.]. The following is my ruleset abbreviated to the
rules that apply to this problem:

ext_if = "en0"
allowed = "{ 192.168.1.10 }"
std_tcp_in = "{ ssh }"
block in log
block out log (user)
pass in quick on $ext_if proto tcp from $allowed to ($ext_if) port
$std_tcp_in keep state

Why are those packets being blocked?



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CA%2BQLa9D97WytnE2Yiy6VFXDrhcgLcpPGf2zB16urjf2Ms%2BrzFg>