I am trying to get an instance of pf running under FreeBSD 13.3 and seeing what I consider to be a problem. For various reasons it is QUITE important to me to have very effective blocking of anything I do not explicitly pass. I am editing /etc/pf.conf and the running pfctl -v -F all -f /etc/pf.conf to load the newly edited rule set, and according to the messages that yields it appears to work. But the following is observed ...
After running simply pfctl -v -F all and then pinging a host out in the world at large, the ping is still passed through. I was lead to believe that the default was to pass nothing . So what gives?
Next edit pf.conf to read
block drop all
block drop inet proto icmp all
and then running pfctl -v -F all -f /etc/pf.conf
ping still passes and runs. Again, what gives?
Am I doing this all wrong, is there something I am missing, am I just snakebit, or is this the way things are supposed to work?
You are right, life is tough when you are trying something new to you. But then "experience is what you get when you expected something else."![Smile :) :)](data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7)
Thanks,
QG
After running simply pfctl -v -F all and then pinging a host out in the world at large, the ping is still passed through. I was lead to believe that the default was to pass nothing . So what gives?
Next edit pf.conf to read
block drop all
block drop inet proto icmp all
and then running pfctl -v -F all -f /etc/pf.conf
ping still passes and runs. Again, what gives?
Am I doing this all wrong, is there something I am missing, am I just snakebit, or is this the way things are supposed to work?
You are right, life is tough when you are trying something new to you. But then "experience is what you get when you expected something else."
Thanks,
QG