Look at this 2 line in your conf:
pass in on $ext_if from any to $udpserver port 6666
pass in on $int_if from any to $udpserver port 6666
Now try this:
pass in on $ext_if from any to $udpserver port 6666
pass in on $int_if from $udpserver to any port 6666
I think that is the solution.
Or you can try
pass in on $ext_if from any to $udpserver port 6666 keep state
If this don't solve your problem try to debug using "tcpdump" in the
interfaces to look the UDP dgrams flowing trought them.
F Walls wrote:
Hi there everybody this is my first post, it might be off-topic, but here we go:
I am having a problem with a UDP service that I am running, in that nobody can
connect, these are my PF rules:
#-------
# Macros
#-------
Content not important
scrub in all
#--------
# NAT
#--------
nat on $ext_if from $int_if:network to any ($ext_if)
rdr on $ext_if proto udp from any to ($ext_if) port 6666 -> $udpserver port 6666
#--------
# Filters
#--------
block log all
pass quick on lo0 all
block drop in quick on $ext_if from $private_networks to any
block drop out quick on $ext_if from from any to $private_networks
pass in on $ext_if from any to $udpserver port 6666
pass in on $int_if from any to $udpserver port 6666
pass in on $int_if from $int_if:network to any keep state
pass out on $int_if from any to $int_if:network keep state
pass out on $ext_if proto tcp all modulate state flags S/SA
pass out on $ext_if proto {udp, icmp} all
pass out on $ext_if proto esp all keep state
Can anybody tell me what the problem is? I really want to know about the
mistake that I am making so all verbose tips would be appreciated. Also is this
PF rule secure?
Frankie
--
Atenciosamente,
Rafael Henchen
System Administrator
- Hoplon Infotainment SA -
--------------------------------------------------------------------------
FREE Download - The Future in Desktop Firewalls is Available Now
NEW NetOp Desktop Firewall, the world's first driver-centric
firewall software - protecting your laptops and corporate PCs at
ring-zero! NetOp features sophisticated process & application
control, centralized management and multiple network user profiles -
NetOp is able to increase security when mobile users plug back
into your network. Step into a more secure future - Try it FREE
http://www.securityfocus.com/sponsor/CrossTec_firewalls_050315
--------------------------------------------------------------------------
