[Bug 215041] [pf] Handshake to certain (fixed) hosts is dropped

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Mon Jan 23 05:45:54 UTC 2017


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=215041

Max <maximos at als.nnov.ru> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |maximos at als.nnov.ru

--- Comment #6 from Max <maximos at als.nnov.ru> ---
(In reply to bsd from comment #3)

int_if="em0"
ext_if="re0"

rdr on $int_if inet proto tcp from any to any port www -> 127.0.0.1 port 3128

pass in quick on $int_if route-to lo0 inet proto tcp from any to 127.0.0.1 port
3128 keep state
pass all


Why "route-to"?..
It's just 
 rdr pass on $int_if inet proto tcp from any to any port www -> 127.0.0.1 port
3128
or
 rdr on $int_if inet proto tcp from any to any port www -> 127.0.0.1 port 3128
 pass in quick on $int_if inet proto tcp from any to 127.0.0.1 port 3128
or
 rdr on $int_if inet proto tcp from any to any port www tag PROXY -> 127.0.0.1
port 3128
 pass in quick on $int_if tagged PROXY


And there is something weird in your pflog-filtered.pcap...

Can you show full network and PF configs? ...and bridge0 dump?

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the freebsd-pf mailing list