pfctl

  1. patpro

    Solved weird pfctl -s labels outputs

    Hello, I’m using pf on a FreeBSD 14.1-RELEASE and I have this kind of rules: block in log quick proto tcp from <datacenteripv4> to $ext_if port 22 label "datacenteripv4 ssh deny" When I display statistics by labels, many lines are duplicated, but with different metrics: # pfctl -s...
  2. K

    PF Confused whitelist location?

    Hi. I'm confused a bit about where to put my whitelist table (containing IPs that shouldn't get blocked). My current configuration does not whitelist my <whitelist> table. This is the trimmed pf.conf file of mine; ext_if="re0" table <whitelist> persist file "/var/pf/whitelist.txt" table...
  3. K

    PF A NAT question on 'port 1024:65535'

    Hi. In PF rules, could someone explain the differences between; nat on $ext_if from ($int_if:network) to any -> ($ext_if:0) and nat on $ext_if from ($int_if:network) to any -> ($ext_if:0) port 1024:65535 On the second rule, what does port 1024:65535" actually do in terms of NAT? "$int_if"...
  4. K

    PF To NAT or not to NAT? A host machine with PF and a jail running mail services

    Greetings. I have public NIC with few public IPs assigned; $ext_if = my external NIC with my public Internet addresses $public_IP_1 = one of my public Internet IP (assigned as an alias and working on $ext_if) And 10.10.10.2 is my jail running on FreeBSD 14 host machine. I have the following PF...
  5. plexinvise

    Solved Can't make PF work with Dummynet on FreeBSD 14RC3 and RC4

    Hi there, I am trying to setup a simple PF firewall with dummynet and despite all my efforts I am failing. I would appreciate a helping hand, thank you. Below is the setup description and all the details that might be useful. I've been trying to apply pass rule for the pipe on different...
  6. atmosx

    Kernel panic when enabling pfctl in Rpi2 armv7 13.2-STABLE

    Hello, I'm running FreeBSD-13.2 armv7 on a raspberry pi v2 featuring 1GB RAM. When enabling pfctl the system crashes and then reboots. Here is the basic kgdb output: GNU gdb (GDB) 13.2 [GDB v13.2 for FreeBSD] Copyright (C) 2023 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3...
  7. R

    Help me understand these PF rules and troubleshoot the problem

    Hi, I have a software that deploys a DNS forwarder and uses PF to redirect local DNS requests to the forwarder. All of sudden this schema stopped working and I am trying to figure out what could be the problem. I am troubleshooting the issue and trying to verify every piece. My question is...
  8. luckman212

    PF Possible to pre-determine which gateway a packet will egress from without actually sending the packet?

    I am trying to create a script that looks at an existing stateful connection and tries to figure out if it's using the most preferred gateway according to the pf ruleset (policy). Is there a way from a console terminal, to determine what gateway would be used for new connections to a certain...
  9. l008com

    `pf` Rule Tables - Advanced Options

    I have a PF table defined in my .conf file to which my server automatically adds bad traffic. There are a bunch of different systems that will block an host for various reasons, and for various amounts of time. However rather than relying on PF itself to 'expire' old rules, I manage that myself...
  10. L

    PF Communication between fail2ban and pf fails

    EDIT: the problem is solved Hello, i had used Debian at the last several years and i'm very new to FreeBSD. I tryed to port my configuration for fail2ban from my Debian machines to FreeBSD (with the modification due the firewall has changed). In my testing phase i have found out that the...
  11. H

    Solved PF in jail: /dev/pf: No such file or directory

    When trying to start pf with service pf start, I get the following error message: Enabling pfpfctl: /dev/pf: No such file or directory pfctl: /dev/pf: No such file or directory pfctl: /dev/pf: No such file or directory My Jails are confiugred in /etc/jail.conf: # Global Stuff exec.start...
  12. patpro

    PF hostname resolution bug with unbound_local

    I run a FreeBSD 10.3-RELEASE-p14 server with a PF firewall. Few days ago I've activated the local unbound server for caching purposes. My pf rules have been created few years ago and work well. They include some persistent table definitions with either IP addresses or hostname or both: table...
Back
Top