View Single Post
  #9   (View Single Post)  
Old 7th July 2014
jggimi's Avatar
jggimi jggimi is offline
More noise than signal
 
Join Date: May 2008
Location: USA
Posts: 7,984
Default

Quote:
Originally Posted by EverydayDiesel View Post
If i add the following lines to /etc/authpf/authpf.rules
Code:
pass in from any to any
Then yes the window will stay open and say you are now authenticated.
1. You have a configuration problem. SSH is being blocked between the end device and the gateway. SSH traffic must pass in order to authenticate. Either your rules are not properly loaded, or you are never reaching traffic with your pass rule for inbound SSH. Again, tcpdump can tell you what traffic is being blocked when you attempt to make the SSH connection for the authpf user.
Quote:
the pf command returns nothing, just immediately back to the command prompt
2. You have another configuration problem, if this is while the the user is authenticated and connected. If that's the case, no rules are anchored.
Quote:
tcpdump doesnt display anything related to the login. I do see blocks in athn0 on port 53

rule 0/(match) block in on athn0: 10.2.0.32.60596 > 4.4.4.4.53: 946+[|domain]
3. DNS is being blocked. DNS queries use UDP (and sometimes TCP) to destination port 53.
Reply With Quote