Had to allow localhost->localhost on FB 10.4

Max maximos at als.nnov.ru
Fri Oct 20 04:43:57 UTC 2017


set skip on lo

(or  set skip on lo0)


20.10.2017 1:15, Dave Horsfall пишет:
> Just upgraded to FreeBSD 10.4 (and NTP stopped working, but that's a 
> separate issue), and found that my pf log was flooded with things like:
>
>     00:03:25.172691 IP localhost.56537 > localhost.domain: 
> 33908+[|domain]
>     00:03:30.650949 IP localhost.51150 > localhost.domain: 
> 13457+[|domain]
>     00:03:35.669987 IP localhost.47363 > localhost.domain: 7594+[|domain]
>     00:03:54.528312 IP localhost.18250 > localhost.domain: 96+[|domain]
>     00:03:59.830324 IP localhost.15552 > localhost.domain: 
> 45957+[|domain]
>     00:04:04.845808 IP localhost.47042 > localhost.domain: 
> 24817+[|domain]
>     00:04:10.689009 IP localhost.30385 > localhost.domain: 
> 28807+[|domain]
>     00:04:12.398079 IP localhost.37872 > localhost.domain: 
> 56445+[|domain]
>     00:04:16.474337 IP localhost.48196 > localhost.domain: 9865+[|domain]
>     00:04:17.943754 IP localhost.10177 > localhost.domain: 
> 38494+[|domain]
>     00:04:22.132642 IP localhost.23265 > localhost.biff: UDP, length 15
>
> I was forced to add the following entry in pf.conf until I could 
> investigate
> this further:
>
>     # Stuffed if I know why localhost/UDP is now blocked by default...
>     pass in quick from localhost to localhost
>
> Anyone else noticed this?
>



More information about the freebsd-pf mailing list