Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 18 Oct 2007 18:29:47 +0300
From:      Nikos Vassiliadis <nvass@teledomenet.gr>
To:        freebsd-questions@freebsd.org
Cc:        "Michael K. Smith - Adhost" <mksmith@adhost.com>
Subject:   Re: Odd PF Denied Message
Message-ID:  <200710181829.48220.nvass@teledomenet.gr>
In-Reply-To: <17838240D9A5544AAA5FF95F8D5203160297F7B3@ad-exh01.adhost.lan>
References:  <17838240D9A5544AAA5FF95F8D5203160297F7B3@ad-exh01.adhost.lan>

next in thread | previous in thread | raw e-mail | index | archive | help
On Thursday 18 October 2007 17:59:49 Michael K. Smith - Adhost wrote:
> Hello All:
>
> We're getting a ton of these.
>
> +Connection attempt to TCP 127.0.0.1:113 from 127.0.0.1:52655 flags:0x02

This doesn't look like a pf(4) message. This looks like
sysctl net.inet.tcp.log_in_vain is 1. It logs every connection
attempt to a non-listening TCP port.

>
> We've basically allowed all traffic to and from 127.0.0.1 in our
> ruleset, but nothing seems to work.  Does anyone have a magic bullet to
> make this go away?

Yes, set the afore-mentioned sysctl to 0.

Nikos



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200710181829.48220.nvass>