hi,
can u try
rdr pass on $ext_if proto udp from any to any port 6666 -> $udpserver port 6666
for debugging..
and tcpdump -i int_if udp
On Wed, 23 Mar 2005 02:51:37 +0800, F Walls <fwalls@linuxmail.org> wrote:
Hi there everybody this is my first post, it might be off-topic, but here we
go:
I am having a problem with a UDP service that I am running, in that nobody
can connect, these are my PF rules:
#-------
# Macros
#-------
Content not important
scrub in all
#--------
# NAT
#--------
nat on $ext_if from $int_if:network to any ($ext_if)
rdr on $ext_if proto udp from any to ($ext_if) port 6666 -> $udpserver port
6666
#--------
# Filters
#--------
block log all
pass quick on lo0 all
block drop in quick on $ext_if from $private_networks to any
block drop out quick on $ext_if from from any to $private_networks
pass in on $ext_if from any to $udpserver port 6666
pass in on $int_if from any to $udpserver port 6666
pass in on $int_if from $int_if:network to any keep state
pass out on $int_if from any to $int_if:network keep state
pass out on $ext_if proto tcp all modulate state flags S/SA
pass out on $ext_if proto {udp, icmp} all
pass out on $ext_if proto esp all keep state
Can anybody tell me what the problem is? I really want to know about the
mistake that I am making so all verbose tips would be appreciated. Also is
this PF rule secure?
Frankie
--
______________________________________________
Check out the latest SMS services @ http://www.linuxmail.org
This allows you to send and receive SMS through your mailbox.
Powered by Outblaze
--------------------------------------------------------------------------
FREE Download - The Future in Desktop Firewalls is Available Now
NEW NetOp Desktop Firewall, the world's first driver-centric
firewall software - protecting your laptops and corporate PCs at
ring-zero! NetOp features sophisticated process & application
control, centralized management and multiple network user profiles -
NetOp is able to increase security when mobile users plug back
into your network. Step into a more secure future - Try it FREE
http://www.securityfocus.com/sponsor/CrossTec_firewalls_050315
--------------------------------------------------------------------------
--
Huzeyfe ÖNAL
Ford Otosan Security Administrator
Tel. +90 262 315 5105
Mobil. +90 505 526 0064
E-mail honal@ford.com.tr
--------------------------------------------------------------------------
FREE Download - The Future in Desktop Firewalls is Available Now
NEW NetOp Desktop Firewall, the world's first driver-centric
firewall software - protecting your laptops and corporate PCs at
ring-zero! NetOp features sophisticated process & application
control, centralized management and multiple network user profiles -
NetOp is able to increase security when mobile users plug back
into your network. Step into a more secure future - Try it FREE
http://www.securityfocus.com/sponsor/CrossTec_firewalls_050315
--------------------------------------------------------------------------
