pf filter

Hello, I would like to send port 80 and 443 traffic out one interface while all other traffic goes via another. Specifically, I'd like all 80 and 443 traffic to go out the wifi interface while all other traffic goes out the wired ethernet interface. I tried various filtering rules to no avail...

If this sequence of packet headers is valid: SYN, SYN+ACK, ACK ( the 3-way handshake), then why is the default flag filter S/SA? I am having some difficulty in determining why NATed connections through a newly setup PF based router/firewall to a particular host drop. The one thing that stands...

I set up the system to function as a router using isc-dhcpd, pf, and was going to use unbound to send encrypted dns requests to Cloudflare's 1.1.1.1, but I can't even get it to work without that yet. As it is, when I access a website from my pc connected to the router, the websites don't...

I am considering a pf rule like this: pass in on $ext_if inet proto tcp from <ssh_clients> to ($ext_if) port $myssh keep state (max-src-conn 9, max-src-conn-rate 2/5, overload <blocked_guests> flush global) But I am not sure if allowing ssh connections only from a whitelist (ssh_clients) will...

I don't have traffic back between router and vm1. I've set pass all with logs enabled to see better packets flow. FreeBSD BOX: hypervisor vm1: VM guest router: wifi router gateway igb2: 192.168.1.1 bridge0: 10.0.0.1 tap0: 10.0.0.18 router: 192.168.1.2...

Hi, I have a problem with my PF it seems after all verification made with pfctl -vnf /etc/pf.conf NOT with the rulesets but number of tables and the size of it. Can be adjusted this situation? I can't control the size of tables for zones because are country based IP net blocks. So first I...

Hi, please help me. I use pf filter on the FreeBSD 9.3 x64. I have two internet connection and setting rules in pf.conf. It works fine when packets inputs on one IPs and default router is one IPs or inputs on second IPs and default router is second IPs. Please write me example pf rules for my...