afp+pf

[Michael K. Smith - Adhost]

Hello Danielisz:
> 
> I'm sending you my pflog captured whiled I try to connect, maybe
> somebody will figure out something:
> 
> 
> # tcpdump -i rl0 -n port 548
> tcpdump: verbose output suppressed, use -v or -vv for full protocol
> decode
> listening on rl0, link-type EN10MB (Ethernet), capture size 96 bytes
> 
> 19:01:31.353245 IP 192.168.1.101.63912 > 192.168.1.1.548: Flags [S],
> seq 721406618, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val
> 206874734 ecr 0,sackOK,eol], length 0
> 19:01:35.358575 IP 192.168.1.101.63912 > 192.168.1.1.548: Flags [S],
> seq 721406618, win 65535, options [mss 1460,sackOK,eol], length 0
> 

Is your firewall acting as an Appletalk router?  I guess I'm not understanding why you are sending AFP to the firewall and not through the firewall from host to host.

When you log your block statement and tcpdump the pflog0 interface, are you seeing the blocks?

Regards,

Mike