pf BUG?

KES kes-kes at yandex.ru
Wed Mar 28 21:26:20 UTC 2007


Hello

I start to use ADSL
My net work has next sturcture:
CPU -iIP----  rl0 -SERVER -tun0---  >>>>> INET

I have next pf rules

1) drop all
2) pass in quick on tun0 all
3) pass out quick on tun0 all
4) pass in on rl0 from $iIp to any
5) pass out on rl0 from any to $iIp

Next thing is wrong:
If I ping inet from CPU

2) pass in log-all on tun0 all
3) pass out quick on tun0 all

tpcdump pflog0 shows nothing
But
2) pass in on tun0 all
3) pass out log-all quick on tun0 all

tpcdump pflog0 shows in and out traffic on tun0 interface!!!

System was builded from 2007-03-27 sources
architecture is sparc64




More information about the freebsd-pf mailing list