authpf on FreeBSD 5.3

Jacques Beigbeder Jacques.Beigbeder at ens.fr
Tue Mar 1 14:38:04 GMT 2005


Hello,

Kernel (the standard one, from CD distribution):
FreeBSD mybox.ens.fr 5.3-RELEASE FreeBSD 5.3-RELEASE #0: Fri Nov  5 04:19:18 UTC 2004
     root at harlow.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC  i386

I fail to have authpf working on FreeBSD 5.3.

I setup a pf.conf file ending with:
	anchor "authpf/*"

'pfctl -sr' displays correctly:
	[ ... ]
	anchor authpf/* all

'pfctl -a authpf -s rules' displays:
	No rulesets in anchor 'authpf'.

I run an ssh on a client, and then 'pfctl -a authpf -s rules' displays:
(a poor rule just for test):
	pass in quick on bge1 inet proto tcp from 1.2.3.4 to any
But a connection from 1.2.3.4 fails.
( connections means 'ssh' with numeric IP )

But if I add exactly (cut & paste) this rule to /etc/pf.conf,
and I reload (pfctl -f /etc/pf.conf), connections from 1.2.3.4
works.

Where is my mistake?

Thanks in advance,

--
Jacques Beigbeder                    |  Jacques.Beigbeder at ens.fr
Service de Prestations Informatiques |     http://www.spi.ens.fr
Ecole normale supérieure             |
45 rue d'Ulm                         |Tel : (+33 1)1 44 32 37 96
F75230 Paris cedex 05                |Fax : (+33 1)1 44 32 20 75



More information about the freebsd-questions mailing list