Re: What is the difference between these anchor rules

[edgar]

On Mar 16, 2020 11:07 AM, Carlos Lopez <clo...@outlook.com> wrote:

  Hi all,

  I am trying to accomplish several different tests using anchors rules
  under an OpenBSD 6.6 host. But I am seeing a strange behavior
  depending how I configure them. For example:

  This rule works:

  anchor inet from $laptop_admin label "Allow access from $srcaddr via
  SSH" {
  anchor proto tcp to port ssh {
  pass in to (self)
  pass in to { $dmz_network $vpn_network  } tag intlans-to-intlans
  }
  }

  But this one never matches:

  anchor inet from $laptop_admin label "Allow access from $srcaddr via
  http/https services" {
  anchor proto tcp to port { http https } {
  pass in $hots2 tag intlans-to-intlans
  }
  }


Is hots2 a typo in the  mail or the conf also? Or maybe it's not a typo.
Edgar 


  I have tried inserting “quick” keyword in second rule, but
  nothing … Maybe am I doing some mistake? Rules that works goes
  before than the other that fails … Changing order, it doesn’t
  matter …

  Any tip?
  --
  Regards,
  C. L. Martinez