pf, ssh related question

Maxim Khitrov mkhitrov at gmail.com
Sat Oct 17 11:45:00 UTC 2009


2009/10/17 Dánielisz László <laszlo_danielisz at yahoo.com>:
> Hello,
>
> I have the following annoying thing: all the time I runpfctl -F all -f /etc/pf.conf I got disconnected from my remote machine.
> Do you have any idea how can I avoid this?

If you are just trying to reload the changes made to pf.conf, use
"/etc/rc.d/pf reload". That flushes everything except for the state
table, leaving your connections intact. Another method is to set
"flags any" for each rule, which should allow connections to recover
after the states are flushed, but this would be a bad idea
security-wise.

- Max


More information about the freebsd-questions mailing list