Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 2 Oct 2006 10:14:36 +0200
From:      Matthias Fechner <idefix@fechner.net>
To:        freebsd-questions@freebsd.org
Subject:   Problem with pf - bug?
Message-ID:  <20061002081435.GB19542@server.idefix.loc>

Next in thread | Raw E-Mail | Index | Archive | Help
Hi,

I added the following rules to my config for pf:
table <bruteforce> persist file "/usr/local/firewall/bruteforce"
block in   log  quick inet  from <bruteforce>  to any  label "RULE 1 \
-- DROP "
pass in   log  quick inet proto tcp  from any  to any port 22 flags \
S/AS modulate state  (  max-src-conn 100 max-src-conn-rate 5/10,
overload \
<bruteforce> flush global )  label "RULE 2 -- ACCEPT "

If I load the rules everything is fine but if I restart/reload the
rules with the command (sudo /etc/rc.d/pf restart) the PC hangup
compeletely. CTRL+ALT+del has no effect the only why to get the PC
running again is pressing the reset button and do a manual filesystem
check.

Can anyone please help me?

Best regards,
Matthias

-- 

"Programming today is a race between software engineers striving to
build bigger and better idiot-proof programs, and the universe trying to
produce bigger and better idiots. So far, the universe is winning." --
Rich Cook



Want to link to this message? Use this URL: <http://docs.FreeBSD.org/cgi/mid.cgi?20061002081435.GB19542>