Hello,
in the first example you don't specify proto tcp.

Regards,

Loïc Blot,
UNIX Systems, Network and Security Engineer
http://www.unix-experience.fr

27 février 2015 09:50 "Harald Dunkel" <harald.dun...@aixigo.de> a écrit:
> Hi folks,
> 
> /etc/services provides protocol information as well, so I wonder
> if a pf line like
> 
> pass in from any to (self) port telnet
> 
> could be read as
> 
> pass in proto tcp from any to (self) port 23
> 
> ?
> 
> Currently (5.6 stable) there is an error message, e.g.
> 
> /etc/pf_gate5.conf:351: port only applies to tcp/udp
> /etc/pf_gate5.conf:351: skipping rule due to errors
> /etc/pf_gate5.conf:351: rule expands to no valid combination
> 
> I cannot follow the "no valid combination".
> 
> Just a suggestion, of course. Keep on your good work
> 
> Harri

Reply via email to