pffirewall

  1. zilti

    Wireguard and PF - Have clients be able to connect to each other

    I have three machines, Gateway, A, and B. My goal is to have Gateway as a Wireguard server, and A and B as Wireguard clients; and have all three be able to connect to each other via ssh. The current situation is that A and B will just time out trying to connect to any of the others; and Gateway...
  2. zilti

    Solved How do I share a ZFS share via NFSv4 over wireguard and a PF firewall?

    I can't seem to figure this out. I got to the point where a mount would "work", ls shows nothing, but I can cd through the folder structure of the mounted NFS share. I have no idea what I am doing wrong, and neither does the Internet, apparently... NFS Server / Wireguard Client config...
  3. U

    IPFW ipfw and pf

    Hello everyone, I would like to use pf and ipfw at the same time for different tasks, but I can not understand who is activated first (if there is an order) when a rule is received. Also trying to verify this, I can’t figure out where the pf and ipfw log files are located on both OPNsense and...
  4. B

    PF PF not allowing IPv6 traffic

    Hello, I'm new to FreeBSD and loving it. The only thing I'm really struggling with is getting a good pf.conf. Here's my attempt. Sadly I can't get it to allow IPv6 traffic. Can anyone help me with what I'm doing wrong? vtnet0 = "vtnet0" set skip on { lo0 lo1 } # basic hardening scrub in all...
  5. abbec

    PF Help understanding the PF statistics

    I have a rule pass out quick which presumably allows all outgoing traffic. However when I look at the output of pfctl -si I get this: Interface Stats for em0 IPv4 IPv6 Bytes In 140634 4896420 Bytes Out...
  6. C

    PF PF divert-to Loop Problem

    Hi, I used ipfw before My ipfw rule was like this : ipfw -q add 11 divert 4444 udp from any to any dst-port 53 in via igb1 I move on pf now My pf rule was like this : pass in quick on igb1 proto udp from any to port { 53 } divert-to 127.0.0.1 port 4444 My Code : #include <stdio.h> #include...
Back
Top