Re: pf filtering openvpn problem

2010-08-02 Thread Maciej Milewski
Dnia poniedziałek 02 sierpień 2010 o 11:16:37 Daniel Hartmeier napisał(a): > The connection is from 10.10.0.8 to 10.0.10.2:22, it comes in > on tun0, matching > > > pass log on tun0 inet proto tcp from 10.10.0.0/24 to 10.0.10.2 flags S/SA > > keep > > and then passes out on sk0, but there is no m

Re: pf filtering openvpn problem

2010-08-02 Thread Daniel Hartmeier
The connection is from 10.10.0.8 to 10.0.10.2:22, it comes in on tun0, matching > pass log on tun0 inet proto tcp from 10.10.0.0/24 to 10.0.10.2 flags S/SA > keep and then passes out on sk0, but there is no matching rule. Since your default block rule > block drop in log all only applies to

pf filtering openvpn problem

2010-07-31 Thread Maciej Milewski
Hi All, I'm trying to setup OpenVPN in non-nat mode and I stopped on something what I don't understand. The setup is rather simple: (internet) -> (nat)->(ovpn gate-10.0.10.4) -> (host-10.0.10.2) | vpn client Routing is set properly on the server o