On 22 January 2010, at 01:45, Erik Norgaard wrote:

> To debug pf rules:
> 
> - always add direction to the rule, pass or block, add interface to all
>  rules except default policy, keep state on all pass rules
> - group your rules per direction, then per interface
> - add log to all rules and watch pflog to see which rule blocks or
>  passes traffic.
> - use keyword quick for any decisive rule
> - check the parsing of your ruleset, pfctl -sr
> 
> then come back and ask for help.

Where do you find the rule information in the pflog output from tcpdump?  

_______________________________________________
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Reply via email to