PF blocking even if set to pass all

Ghirai ghirai at ghirai.com
Thu Dec 13 03:26:34 PST 2007


On Thu, 13 Dec 2007 09:19:03 -0200
"Alaor Barroso de Carvalho Neto" <alaorneto at gmail.com> wrote:

> Hi guyz, like I've said in other topic, I'm building a BSD box that'll act
> as a gateway between three private networks and the internet. I want that
> each private network can ping to each other, and I can do that till I
> activate my pf firewall. When I do pfctl -e it stop working.
> 
> The output of pfctl -sr is:
> pass in all
> pass out all
> 
> So I guess it would pass anything, why it isn't happening?
> 
> Hugs,
> Alaor
> _______________________________________________

You need to specify from/to what interface it should pass (if you have more
than one NIC, which i assume you do, since the box is acting as a router).

I suggest you read this tutorial/book: http://www.bsdly.net/~peter/pf.html

It explains what you want to do in detail.

-- 
Regards,
Ghirai.


More information about the freebsd-questions mailing list