Had to allow localhost->localhost on FB 10.4

Dave Horsfall dave at horsfall.org
Thu Oct 19 22:50:20 UTC 2017


Just upgraded to FreeBSD 10.4 (and NTP stopped working, but that's a 
separate issue), and found that my pf log was flooded with things like:

     00:03:25.172691 IP localhost.56537 > localhost.domain: 33908+[|domain]
     00:03:30.650949 IP localhost.51150 > localhost.domain: 13457+[|domain]
     00:03:35.669987 IP localhost.47363 > localhost.domain: 7594+[|domain]
     00:03:54.528312 IP localhost.18250 > localhost.domain: 96+[|domain]
     00:03:59.830324 IP localhost.15552 > localhost.domain: 45957+[|domain]
     00:04:04.845808 IP localhost.47042 > localhost.domain: 24817+[|domain]
     00:04:10.689009 IP localhost.30385 > localhost.domain: 28807+[|domain]
     00:04:12.398079 IP localhost.37872 > localhost.domain: 56445+[|domain]
     00:04:16.474337 IP localhost.48196 > localhost.domain: 9865+[|domain]
     00:04:17.943754 IP localhost.10177 > localhost.domain: 38494+[|domain]
     00:04:22.132642 IP localhost.23265 > localhost.biff: UDP, length 15

I was forced to add the following entry in pf.conf until I could investigate
this further:

     # Stuffed if I know why localhost/UDP is now blocked by default...
     pass in quick from localhost to localhost

Anyone else noticed this?

-- 
Dave Horsfall DTM (VK2KFU)  "Those who don't understand security will suffer."


More information about the freebsd-pf mailing list