Thread: port forwarding
View Single Post
  #7   (View Single Post)  
Old 16th November 2008
J65nko J65nko is offline
Administrator
 
Join Date: May 2008
Location: Budel - the Netherlands
Posts: 4,131
Default

Quote:
Originally Posted by ikevmowe View Post
I have tried out above rules. However, I don't see port 55555 is open. SSH it failed.
You also need a rule to pass out the traffic
Code:
pass out quick on $int_if tagged SSH
Thing like this can be figured easily if you have a block log (all) rule, which copies blocked packets to the pflog0 device.
By running tcpdump you then can see these packets
Code:
# tcpdump -eni pflog0
__________________
You don't need to be a genius to debug a pf.conf firewall ruleset, you just need the guts to run tcpdump
Reply With Quote