Hi Erik,
Remember that any quick rule will apply on it and pf will not search
anymore, maybe you should clean up your pf.conf a little bit.
Maybe removing all quick rules you get what you want ;)
-
block in log on $wlan_if inet from $wlan_net to local_net
pass in
I have investigated further:
The state table adds this entry:
all tcp 192.168.0.254:80 - 172.17.1.254:50186
CLOSED:SYN_SENT
Which I suppose reflect the fact that the packet is blocked - I
don't know how to capture the state table after the packet is
passed on the way in, but before it is
Hi,
I have a problem connecting from one local subnet to another
crossing an FBSD box with pf. Should be trivial, I have the
following ruleset:
snip
# Local services accessible from wlan
block in log on $wlan_if inet from $wlan_net to local_net
pass in log quick on $wlan_if inet proto tcp
On Wednesday 02 April 2008 09:03:06 am Erik Norgaard wrote:
Hi,
I have a problem connecting from one local subnet to another
crossing an FBSD box with pf. Should be trivial, I have the
following ruleset:
snip
# Local services accessible from wlan
block in log on $wlan_if inet from