View Single Post
Old 5th December 2013
jggimi's Avatar
jggimi jggimi is offline
More noise than signal
 
Join Date: May 2008
Location: USA
Posts: 7,977
Default

PF is enabled by default, and the OS ships with a default configuration file, which you have modified, by adding the example text I'd provided to you in this thread.

The default configuration for OpenBSD 5.3 or 5.4 a) does not filter on loopback interfaces, b) blocks stateless traffic, c) blocks incoming remote X11 traffic, and d) passes stateful traffic. Here are those lines, with the comments removed:
Code:
set skip on lo
block
pass 
block in on ! lo0 proto tcp to port 6000:6010
The example I'd provided was intended to replace this default configuration.
Quote:
...also ifconfig show my nic=lo0
This is a pseudo-NIC, for loopback traffic. It is not your actual network interface connection. See lo(4).
Reply With Quote