Re: traceroute and pf

2016-09-28 Thread Gregory Edigarov
because it drops privs once initialization done. On 28.09.16 14:24, johnw wrote: On 09/28/2016 07:05 PM, Janne Johansson wrote: Apart from PF failing the syntax, what would one expect to achieve with =0 ? That would always cover all users, since its never a negative number.

Re: traceroute and pf

2016-09-28 Thread johnw
On 09/28/2016 07:05 PM, Janne Johansson wrote: > Apart from PF failing the syntax, what would one expect to achieve with > >=0 ? > > That would always cover all users, since its never a negative number. > /usr/include/sys/types.h:typedef__uid_t uid_t; > /* user id */ >

Re: traceroute and pf

2016-09-28 Thread Janne Johansson
Apart from PF failing the syntax, what would one expect to achieve with >=0 ? That would always cover all users, since its never a negative number. /usr/include/sys/types.h:typedef__uid_t uid_t; /* user id */ /usr/include/sys/_types.h:typedef __uint32_t

traceroute and pf

2016-09-28 Thread johnw
Hi, I have some problem setup pf, to pass out traceroute with user keyword. below rule do WORK. pass out quick on $ext_if inet proto udp from ($ext_if) to any or below one also WORK. pass out quick on $ext_if inet proto udp from ($ext_if) to any user != 1 but below one, do NOT WORK. pass