Quote:
Originally Posted by EverydayDiesel
If i add the following lines to /etc/authpf/authpf.rules
Code:
pass in from any to any
Then yes the window will stay open and say you are now authenticated.
|
1. You have a configuration problem. SSH is being blocked between the end device and the gateway. SSH traffic must pass in order to authenticate. Either your rules are not properly loaded, or you are never reaching traffic with your pass rule for inbound SSH.
Again, tcpdump can tell you what traffic is being blocked when you attempt to make the SSH connection for the authpf user.
Quote:
the pf command returns nothing, just immediately back to the command prompt
|
2. You have another configuration problem, if this is while the the user is authenticated and connected. If that's the case, no rules are anchored.
Quote:
tcpdump doesnt display anything related to the login. I do see blocks in athn0 on port 53
rule 0/(match) block in on athn0: 10.2.0.32.60596 > 4.4.4.4.53: 946+[|domain]
|
3.
DNS is being blocked. DNS queries use UDP (and sometimes TCP) to destination port 53.