Re: PF in FreeBSD 10.0 Blocking Some SSH

2014-01-27 Thread Robert Simmons
On Mon, Jan 27, 2014 at 4:06 PM, Jason Hellenthal wrote: > > I've seen similar things happen on SSH, that were due to a combination of > "scrub"ing and states expiring. Turning off scrub rules on SSH specifically > cured the scenario for me but I don't see an indication of whether or not > you are

Re: PF in FreeBSD 10.0 Blocking Some SSH

2014-01-27 Thread Robert Simmons
On Mon, Jan 27, 2014 at 2:20 PM, Gleb Smirnoff wrote: > Robert, > > On Sun, Jan 26, 2014 at 06:19:34PM -0500, Robert Simmons wrote: > R> Over the course of a few hours there are a handful of SSH packets that > R> are being blocked both in and out. This does not seem t

PF in FreeBSD 10.0 Blocking Some SSH

2014-01-26 Thread Robert Simmons
Over the course of a few hours there are a handful of SSH packets that are being blocked both in and out. This does not seem to affect the SSH session, and all the blocked packets have certain flags set [FP.], [R.], [P.], [.], [F.]. The following is my ruleset abbreviated to the rules that apply to

Using pf and Tor DNS port

2013-03-03 Thread Robert Simmons
I am having problems setting up Tor's DNSPort using pf. In FreeBSD 8.x I was able to just run Tor with the "DNSPort 53" config file option with no problems. Now, with 9.1, when I run it with that option, I get a permission denied error when trying to bind port 53 on localhost. I assume this is f