I'm debuggin some pf issues, one of them is needing to perform a
For example, I am running a test Zabbix server on a VM, the hypervisor has Zabbix agent installed, when all the VMs boot, the test Zabbix server can discover all other VMs and hosts, except for the hypervisor, and when running
(both the VM vnet interface and my em0 interface are part of bridge0).
When I run
Is this normal behaviour? my firewalls were usually Debian and iptables (awful, I know xD), I would simply run
What am I doing wrong?
pfctl -Fr after boot up, otherwise all (sometimes some) rules in my anchor seem to have no effect (I have a blockall rule, then poking holes).For example, I am running a test Zabbix server on a VM, the hypervisor has Zabbix agent installed, when all the VMs boot, the test Zabbix server can discover all other VMs and hosts, except for the hypervisor, and when running
pfctl -v -a my.anchor -sr I notice the following:
Code:
pass on bridge0 inet proto tcp from any to any port = zabbix-agent flags S/SA keep state
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
[ Source Nodes: 0 Limit: 0 NAT/RDR: 0 Route: 0 ]
[ Inserted: uid 0 pid 0 State Creations: 0 ](both the VM vnet interface and my em0 interface are part of bridge0).
When I run
pfctl -v -a my.anchor -sr, the Zabbix server discovers the hypervisor host, however I continue to see the same "0 evaluations, 0 packets, etc"Is this normal behaviour? my firewalls were usually Debian and iptables (awful, I know xD), I would simply run
iptables -vL along with watch (Linux's version of cmdwatch) and I would have a nice statistics page per rule. I am trying to achieve this, but for now I'm trying to understand pf's output at least.What am I doing wrong?