pf filter

  1. A

    PF Redirecting port traffic through alternate interface

    Hello, I would like to send port 80 and 443 traffic out one interface while all other traffic goes via another. Specifically, I'd like all 80 and 443 traffic to go out the wifi interface while all other traffic goes out the wired ethernet interface. I tried various filtering rules to no avail...
  2. byrnejb

    PF PF TCP S/SA default flag filter and TCP 3-way handshake

    If this sequence of packet headers is valid: SYN, SYN+ACK, ACK ( the 3-way handshake), then why is the default flag filter S/SA? I am having some difficulty in determining why NATed connections through a newly setup PF based router/firewall to a particular host drop. The one thing that stands...
  3. R

    Set up freebsd as a home router, and can't get dns to work properly

    I set up the system to function as a router using isc-dhcpd, pf, and was going to use unbound to send encrypted dns requests to Cloudflare's, but I can't even get it to work without that yet. As it is, when I access a website from my pc connected to the router, the websites don't...
  4. J

    PF Blacklisting and/or whitelisting in (BSD) pf

    I am considering a pf rule like this: pass in on $ext_if inet proto tcp from <ssh_clients> to ($ext_if) port $myssh keep state (max-src-conn 9, max-src-conn-rate 2/5, overload <blocked_guests> flush global) But I am not sure if allowing ssh connections only from a whitelist (ssh_clients) will...

    No packets between hypervisor interface and guest

    I don't have traffic back between router and vm1. I've set pass all with logs enabled to see better packets flow. FreeBSD BOX: hypervisor vm1: VM guest router: wifi router gateway igb2: bridge0: tap0: router:
  6. S

    PF PF doesn't load at startup time in FreeBSD 10.1

    Hi, I have a problem with my PF it seems after all verification made with pfctl -vnf /etc/pf.conf NOT with the rulesets but number of tables and the size of it. Can be adjusted this situation? I can't control the size of tables for zones because are country based IP net blocks. So first I...
  7. andrian

    PF pf filter and two internet connection

    Hi, please help me. I use pf filter on the FreeBSD 9.3 x64. I have two internet connection and setting rules in pf.conf. It works fine when packets inputs on one IPs and default router is one IPs or inputs on second IPs and default router is second IPs. Please write me example pf rules for my...