Please help me with my PF config

Alaor Barroso de Carvalho Neto alaorneto at gmail.com
Sat Mar 8 11:19:26 UTC 2008


2008/3/7, Preston Hagar <prestonh at gmail.com>:
>
> It looks like you already have your problem solved.  One utility you
> might want to look at is pftop.  With it, you can see pretty much in
> real time what is going through pf and what is being blocked.  This
> has helped me a lot to find out which rule in blocking something I
> need to let through.  If you run pftop, then hit the right arrow key,
> it will have the rule that is being applied for a given connection on
> the far right-hand side.  If you hit SHIFT+S it will order the
> connections by source ip to help you find what you are looking for.
> Once you have the rule number that is blocking the connection you need
> to let through, hit the right arrow 4 more times to see the list of
> rules and their corresponding numbers.
>
> It may or may not be of much use to you, but I have found pftop to be
> indispensable when setting up pf firewalls.
>
> Preston
>
It looks great. I was looking for something like this because I would like
to see what is happening in the network. I'm gonna install this on monday.
Thankz for the tip.

Hugs,
Alaor Neto.


More information about the freebsd-questions mailing list