do not work nested unnamed anchor

Igor A. Valcov viaprog at gmail.com
Thu May 8 14:39:14 UTC 2008


Hello.

For example:

==== pf.conf ====

ext_if="xl0"
ip_world="nn.nn.nn.nn"

# Filter rules
block log all

anchor in on $ext_if {
        pass quick proto tcp to $ip_world port 22 keep state
             # SSH
        pass quick proto tcp to $ip_world port 25 keep state
             # SMTP
        pass quick proto tcp to $ip_world port 110 keep state
             # POP3
        anchor  {
            pass quick proto tcp to $ip_world port 995 keep state
             # POP3S
        }
}

============

nmap results:

PORT    STATE SERVICE VERSION
22/tcp  open  ssh     OpenSSH 4.5p1 (FreeBSD 20061110; protocol 2.0)
25/tcp  open  smtp?
110/tcp open  pop3    Openwall popa3d


I can not understand what the problem...

FreeBSD-7.0-RELEASE-p1
i386

-- 
Igor A. Valcov


More information about the freebsd-hackers mailing list