PF filter rule for LAN to LAN ssh traffic

[James B. Byrne]

What is the PF filter rule to permit ssh between hosts on the LAN side
of a gateway firewall?  When I ssh to a host the intitial connection
works fine.  But, after a few seconds the session becomes
non-responsive and is eventually dropped with this message

Fssh_packet_write_wait: Connection to 192.168.216.18 port 22: Broken pipe

I tried various formulations of this:

pass          in  log   on $int_if \
                  from  $int_if:network \
                  to    $int_if:network keep state

pass          out log   on $int_if \
                  from  $int_if:network \
                  to    $int_if:network keep state

None of which worked.


-- 
***          e-Mail is NOT a SECURE channel          ***
        Do NOT transmit sensitive data via e-Mail
 Do NOT open attachments nor follow links sent by e-Mail

James B. Byrne                mailto:ByrneJB at Harte-Lyne.ca
Harte & Lyne Limited          http://www.harte-lyne.ca
9 Brockley Drive              vox: +1 905 561 1241
Hamilton, Ontario             fax: +1 905 561 0757
Canada  L8E 3C3