View Single Post
Old 17th November 2016
Amithapr Amithapr is offline
Fdisk Soldier
 
Join Date: Dec 2015
Posts: 69
Default

Hi Jggimi,

I changed my rules so that the DNS outbound traffic also pass through the firewall( rules are given below). But still I cannot access the internet directly or using the proxy.

the "tcpdump -neti pflog0 | tee /tmp/my.pf.log.output" commands output file is attahced herewith.

Code:
# BLOCK IT ALL ON INTERNAL NIC
block on $int_if all

# REDIRECT http, https LAN TRAFFIC TO PROXY SERVER
pass in on $int_if proto tcp from $lan to any port { http https } rdr-to $proxy

# LET http, https OUT FROM PROXY SERVER
pass out on $ext_if proto tcp from $proxy to any port { http https } keep state

# For DNS Traffic
pass in on $int_if proto { tcp, udp } from any to any port = 53 keep state
pass out on $int_if proto { tcp, udp } from any to any port = 53 keep state
Attached Files
File Type: txt mypflog.txt (330.1 KB, 62 views)
Reply With Quote