pf rules sanity check

2017-03-03 Thread David Mehler
Hello, Can someone take a look at these rules and let me know where I'm going wrong? I'm running a 10.3 system that was working great, but now I've added some jails to it and am noticing two behaviors. The first is that whenever I bring up a new jail and it gets an ip address I have to do a pfct

Re: Rules sanity check

2015-10-13 Thread Kristof Provost
> On 13 Oct 2015, at 18:59, David Mehler wrote: > Thanks. How do I get icmpv6 going? That is certainly a problem I'm having. > I’d start off simply allowing all icmpv6 traffic: pass in inet6 proto icmp6 Regards, Kristof ___ freebsd-pf@freebsd.org mai

Re: Rules sanity check

2015-10-13 Thread David Mehler
Hello, Thanks. How do I get icmpv6 going? That is certainly a problem I'm having. Thanks. Dave. On 10/13/15, Kristof Provost wrote: > >> On 13 Oct 2015, at 05:51, David Mehler wrote: >> Some things I know definitely aren't working is the ipv6 allowing of >> ssh and http, ipv6 ping doesn't wor

Re: Rules sanity check

2015-10-13 Thread Kristof Provost
> On 13 Oct 2015, at 05:51, David Mehler wrote: > Some things I know definitely aren't working is the ipv6 allowing of > ssh and http, ipv6 ping doesn't work gives a udp error, ftp from the > machine the data connection doesn't come through, i'm assuming i'll > have that same problem when I set u

Rules sanity check

2015-10-12 Thread David Mehler
Hello, I'm back to pf after a number of years with mainly Linux servers. I'm running FreeBSD 10 on a machine with pf. I'm hoping someone can give my rules such as they are a sanity check? Some things I know definitely aren't working is the ipv6 allowing of ssh and http, ipv6 ping doesn't work giv