Odd PF Denied Message

Nikos Vassiliadis nvass at teledomenet.gr
Thu Oct 18 08:34:44 PDT 2007

On Thursday 18 October 2007 17:59:49 Michael K. Smith - Adhost wrote:
> Hello All:
> We're getting a ton of these.
> +Connection attempt to TCP from flags:0x02

This doesn't look like a pf(4) message. This looks like
sysctl net.inet.tcp.log_in_vain is 1. It logs every connection
attempt to a non-listening TCP port.

> We've basically allowed all traffic to and from in our
> ruleset, but nothing seems to work.  Does anyone have a magic bullet to
> make this go away?

Yes, set the afore-mentioned sysctl to 0.


More information about the freebsd-questions mailing list