PF Configuration - FreeBSD Release 9.0 x64

[Kimmo Paasiala]

On Tue, Sep 11, 2012 at 6:05 PM, Brandon Allbery <allbery.b at gmail.com> wrote:
> On Tue, Sep 11, 2012 at 4:26 AM, Damien Fleuriot <ml at my.gd> wrote:
>
>> On 11 Sep 2012, at 10:15, "Shiv. Nath" <prabhpal at digital-infotech.net>
>> wrote:
>> > It is FreeBSD Release 9.0 x64 and i see this log very frequent almost
>> every second, And i want to block this IP from reaching my server. i
>> configured the PF as following but still see the same logs, it is like it
>> did not work.
>> >
>> > Sep 11 07:49:56 titan avahi-daemon[1567]: Received response from host
>> 41.211.2.239 with invalid source port 4331 on interface 'em0.0'
>>
>> It says it received a *response* so my understanding is *you* are trying
>> to connect.
>>
>
> But it's avahi (a zeroconf implementation) so the response is to a
> broadcast; the remote machine in question may also be broadcasting.
>
> I would actually question why avahi is even enabled on a server; perhaps
> the correct answer is simply to disable it in rc.conf.
>

You do know that avahi-daemon's main use is to advertise _services_
running on a host?