Project

General

Profile

Actions

Bug #2699

closed

pf(4) pass rule not beeing applied

Added by ftigeot almost 10 years ago. Updated about 9 years ago.

Status:
Closed
Priority:
Normal
Assignee:
-
Category:
Networking
Target version:
Start date:
07/10/2014
Due date:
% Done:

0%

Estimated time:

Description

My pf.conf contains a pass rule intended to allow email to flow between two servers.
Very simplified configuration:

[server1]<===>[PF box]<====>[server2]

pf.conf looks like this:

server1="2001:a:b:c:d"
table <server2> {2001:x:y:z:t }
pass in on $ext_if proto tcp from $server1 to <server2> port 25 keep state

I have recently updated my pf firewall to the new multiprocessor-enabled version
in DragonFly 3.9 and since then, TCP connections from server1 are blocked by the
PF machine.
They do not show up in a tcpdump on the PF box/server2 network interface

If I replace the <server2> table by a simple $server2 variable, traffic flows as
intended.

Actions

Also available in: Atom PDF