Skip site navigation (1)Skip section navigation (2)
Date:      Fri,  2 Jul 2010 23:25:58 +0200
From:      "Len Conrad" <lconrad@Go2France.com>
To:        <freebsd-questions@freebsd.org>
Subject:   Subject: pf:  pass in quick to port 25 still getting some blocks
Message-ID:  <201007022325.AA132710676@mail.Go2France.com>

next in thread | raw e-mail | index | archive | help
setting up pf on fbsd 7.2 for host security on a mail gateway.

the only rule for port 25 is:

pass in quick on em0 inet proto tcp from any to $ext_if port = smtp flags S/SA keep state

and then last rule:

block drop in log on em0 inet from any to $ext_if

while 1000s of connections to port 25 are getting through with the pass rule, several 100 connections are getting blocked with the default block rule, bypassing the pass rule.

I can't see how pf is selecting these connections to be blocked.

thanks
Len 



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201007022325.AA132710676>