Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 8 Oct 2006 16:37:10 -0700
From:      "Kian Mohageri" <>
To:        "Justin Franks" <>
Subject:   Re: Need a little PF help here, please...
Message-ID:  <>
In-Reply-To: <000001c6eb31$bab05140$6401a8c0@iea4grrtmmd560>
References:  <000001c6eb31$bab05140$6401a8c0@iea4grrtmmd560>

Next in thread | Previous in thread | Raw E-Mail | Index | Archive | Help
On 10/8/06, Justin Franks <> wrote:
> Have been using PF for over two years and recently ran into "problem"
> which I am sure is something I am overlooking. So I need some direction.
> Here it is: I recently enabled BIND9 on FreeBSD 6.1. I have PF running
> too (PF config below). If I ping nothing happens. However, if
> I comment out the PF rule "block in all" then suddenly I can ping
> Why will my server not resolve names (like if the
> "block in all" statement exists? Why does that statement mess it up?
> What am I missing? Please help because I am totally frustrated.
add 'set skip on lo' before scrub, so you can pass traffic on the loopback
interface (which many things use).

Also, might want to space out your pf.conf a little differently so it has
some distinct sections.

Want to link to this message? Use this URL: <>