[Solved] PF Issue with Blocking

jperalta · #1 August 5th, 2011, 14:24

I'm currently running PF on FreeBSD 8.2-STABLE. My current PF rules look like...

Code:

block in
block out on $ext_if all
pass out on $ext_if inet proto tcp from ($ext_if) queue ( std_out, tcp_ack_out )
pass out on $ext_if inet proto { udp icmp } from ($ext_if)
pass out on $ext_if inet proto { tcp udp } from ($ext_if) to port domain queue dns_out

pass in quick on $int_if no state
pass out on $int_if from $int_if to ($int_if:network)
pass out on $int_if proto { tcp udp } from port domain to ($int_if:network) queue dns_in
pass out on $int_if to 192.168.1.21 queue x360

When I add

Code:

block out on $int_if all

before the first pass out rule for $int_if none of my LAN computers can access either the server or the internet any longer.

Any help with this would be most appreciated. Thanks.

Thread Tools
Show Printable Version Email this Page
Display Modes
Switch to Linear Mode Switch to Hybrid Mode Threaded Mode

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Help with non-blocking IO	soundstep	Userland Programming & Scripting	1	January 12th, 2011 15:02
PF blocking nmap	bbzz	Firewalls	13	December 24th, 2010 16:29
L7 script for skype blocking	mrowcp	Firewalls	1	April 26th, 2010 13:01
SSHGuard not Blocking Connections	Lego	Web & Network Services	49	November 21st, 2009 19:26
Blocking IP addresses	dpalme	Firewalls	6	November 18th, 2009 21:20