/etc/rc.conf.local setup and network connectiont

[fstef]

Hi to everyone,
i've installed scim on my box. This package need dbus and avahi daemons to run properly and according to the /usr/local/share/doc/pkg-readmes files i set the suggested files:

$ cat /etc/rc.conf.local
multicast_host=YES
pkg_scripts=dbus_daemon avahi_daemon

$ cat /etc/pf.conf
#   $OpenBSD: pf.conf,v 1.54 2014/08/23 05:49:42 deraadt Exp $
#
# See pf.conf(5) and /etc/examples/pf.conf

set skip on lo

block return    # block stateless traffic
#pass        # establish keep-state
pass proto udp from any to 224.0.0.251 port mdns allow-opts

# By default, do not permit remote connections to X11
block return in on ! lo0 proto tcp to port 6000:6010

with this configuration on X i can run scim correctly without errors but the machine can't connect to internet.
Obviously, if i delete the /etc/rc.conf.local file and rewrite the /etc/pc.conf to the original state the machine can connect to internet without problems but i can't start the scim app.

where is my errors?
Any suggestion is really appreciate, thanks to everyone.

fstef

below my dmesg

OpenBSD 5.7 (GENERIC.MP) #881: Sun Mar  8 11:04:17 MDT 2015
    deraadt@amd64.openbsd.org:/usr/src/s...ile/GENERIC.MP
RTC BIOS diagnostic error 97<clock_battery,memory_size,invalid_time>
real mem = 1837555712 (1752MB)
avail mem = 1784778752 (1702MB)
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.4 @ 0xe0000 (41 entries)
bios0: vendor Apple Inc. version "MB51.88Z.007D.B03.0904271443" date 04/27/09
bios0: Apple Inc. MacBook5,1
acpi0 at bios0: rev 2
acpi0: sleep states S0 S3 S4 S5
acpi0: tables DSDT FACP HPET APIC MCFG ASF! SBST ECDT SSDT SSDT SSDT
acpi0: wakeup devices ADP1(S3) LID0(S3) EC__(S3) OHC1(S3) EHC1(S3) OHC2(S3) EHC2(S3) GIGE(S5)
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpihpet0 at acpi0: 25000000 Hz
acpimadt0 at acpi0 addr 0xfee00000: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: Intel(R) Core(TM)2 Duo CPU P8600 @ 2.40GHz, 1592.26 MHz
cpu0: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,NXE,LONG,LAHF,PERF
cpu0: 3MB 64b/line 8-way L2 cache
cpu0: smt 0, core 0, package 0
mtrr: Pentium Pro MTRR support, 8 var ranges, 88 fixed ranges
cpu0: apic clock running at 265MHz
cpu0: mwait min=64, max=64, C-substates=0.2.2.2.2, IBE
cpu1 at mainbus0: apid 1 (application processor)
cpu1: Intel(R) Core(TM)2 Duo CPU P8600 @ 2.40GHz, 1592.00 MHz
cpu1: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,NXE,LONG,LAHF,PERF
cpu1: 3MB 64b/line 8-way L2 cache
cpu1: smt 0, core 1, package 0
ioapic0 at mainbus0: apid 1 pa 0xfec00000, version 11, 24 pins
ioapic0: misconfigured as apic 0, remapped to apid 1
acpimcfg0 at acpi0 addr 0xf0000000, bus 0-255
acpiec0 at acpi0
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus 2 (IXVE)
acpicpu0 at acpi0: C3, C2, C1, PSS
acpicpu1 at acpi0: C3, C2, C1, PSS
acpiac0 at acpi0: AC unit online
acpibtn0 at acpi0: LID0
acpibtn1 at acpi0: PWRB
acpibtn2 at acpi0: SLPB
acpibat0 at acpi0: BAT0 model "3545803478581539170" type 3545803479086745932 oem "3545803479086812499"
cpu0: Enhanced SpeedStep 1592 MHz: speeds: 2394, 2128, 1862, 1596 MHz
memory map conflict 0xffc00000/0x400000
pci0 at mainbus0 bus 0
0:3:5: mem address conflict 0x93300000/0x80000
pchb0 at pci0 dev 0 function 0 "NVIDIA MCP79 Host" rev 0xb1
"NVIDIA MCP79 Memory" rev 0xb1 at pci0 dev 0 function 1 not configured
pcib0 at pci0 dev 3 function 0 "NVIDIA MCP79 ISA" rev 0xb2
"NVIDIA MCP79 Memory" rev 0xb1 at pci0 dev 3 function 1 not configured
nviic0 at pci0 dev 3 function 2 "NVIDIA MCP79 SMBus" rev 0xb1
iic0 at nviic0
spdmem0 at iic0 addr 0x50: 1GB DDR3 SDRAM PC3-8500 SO-DIMM
spdmem1 at iic0 addr 0x51: 1GB DDR3 SDRAM PC3-8500 SO-DIMM
iic1 at nviic0
"NVIDIA MCP79 Memory" rev 0xb1 at pci0 dev 3 function 3 not configured
vendor "NVIDIA", unknown product 0x0a98 (class memory subclass RAM, rev 0xb1) at pci0 dev 3 function 4 not configured
"NVIDIA MCP79 Co-processor" rev 0xb1 at pci0 dev 3 function 5 not configured
ohci0 at pci0 dev 4 function 0 "NVIDIA MCP79 USB" rev 0xb1: apic 1 int 11, version 1.0, legacy support
ehci0 at pci0 dev 4 function 1 "NVIDIA MCP79 USB" rev 0xb1: apic 1 int 10
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 "NVIDIA EHCI root hub" rev 2.00/1.00 addr 1
ohci1 at pci0 dev 6 function 0 "NVIDIA MCP79 USB" rev 0xb1: apic 1 int 7, version 1.0, legacy support
ehci1 at pci0 dev 6 function 1 "NVIDIA MCP79 USB" rev 0xb1: apic 1 int 5
usb1 at ehci1: USB revision 2.0
uhub1 at usb1 "NVIDIA EHCI root hub" rev 2.00/1.00 addr 1
azalia0 at pci0 dev 8 function 0 "NVIDIA MCP79 HD Audio" rev 0xb1: apic 1 int 15
azalia0: codecs: Realtek ALC885
audio0 at azalia0
ppb0 at pci0 dev 9 function 0 "NVIDIA MCP79 PCIE" rev 0xb1
pci1 at ppb0 bus 1
nfe0 at pci0 dev 10 function 0 "NVIDIA MCP79 LAN" rev 0xb1: apic 1 int 14, address 00:23:df:a1:86:18
rgephy0 at nfe0 phy 1: RTL8169S/8110S PHY, rev. 2
pciide0 at pci0 dev 11 function 0 "NVIDIA MCP79 SATA" rev 0xb1: DMA
pciide0: using apic 1 int 11 for native-PCI interrupt
wd0 at pciide0 channel 0 drive 0: <FUJITSU MHZ2250BH FFS G1>
wd0: 16-sector PIO, LBA48, 238475MB, 488397168 sectors
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 5
atapiscsi0 at pciide0 channel 1 drive 0
scsibus1 at atapiscsi0: 2 targets
cd0 at scsibus1 targ 0 lun 0: <MATSHITA, DVD-R UJ-868, KB19> ATAPI 5/cdrom removable
cd0(pciide0:1:0): using PIO mode 4, Ultra-DMA mode 4
ppb1 at pci0 dev 16 function 0 "NVIDIA MCP79 PCIE" rev 0xb1
pci2 at ppb1 bus 2
vga1 at pci2 dev 0 function 0 "NVIDIA GeForce 9400m" rev 0xb1
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
ppb2 at pci0 dev 21 function 0 "NVIDIA MCP79 PCIE" rev 0xb1: msi
pci3 at ppb2 bus 3
"Broadcom BCM4322" rev 0x01 at pci3 dev 0 function 0 not configured
isa0 at pcib0
isadma0 at isa0
pcppi0 at isa0 port 0x61
spkr0 at pcppi0
usb2 at ohci0: USB revision 1.0
uhub2 at usb2 "NVIDIA OHCI root hub" rev 1.00/1.00 addr 1
usb3 at ohci1: USB revision 1.0
uhub3 at usb3 "NVIDIA OHCI root hub" rev 1.00/1.00 addr 1
uvideo0 at uhub0 port 4 configuration 1 interface 0 "Apple Inc. Built-in iSight" rev 2.00/4.18 addr 2
video0 at uvideo0
ugen0 at uhub0 port 4 configuration 1 "Apple Inc. Built-in iSight" rev 2.00/4.18 addr 2
uhidev0 at uhub2 port 5 configuration 1 interface 0 "Apple Computer, Inc. IR Receiver" rev 2.00/0.16 addr 2
uhidev0: iclass 3/0, 38 report ids
uhid0 at uhidev0 reportid 36: input=4, output=0, feature=0
uhid1 at uhidev0 reportid 37: input=4, output=0, feature=0
uhid2 at uhidev0 reportid 38: input=4, output=0, feature=0
uhidev1 at uhub2 port 6 configuration 1 interface 0 "Apple, Inc. Apple Internal Keyboard / Trackpad" rev 2.00/0.77 addr 3
uhidev1: iclass 3/1, 9 report ids
ukbd0 at uhidev1 reportid 1: 8 variable keys, 6 key codes, country code 33
wskbd0 at ukbd0: console keyboard, using wsdisplay0
uhid3 at uhidev1 reportid 9: input=0, output=0, feature=3
uhidev2 at uhub2 port 6 configuration 1 interface 1 "Apple, Inc. Apple Internal Keyboard / Trackpad" rev 2.00/0.77 addr 3
uhidev2: iclass 3/0, 68 report ids
uhid4 at uhidev2 reportid 68: input=511, output=0, feature=0
ubcmtp0 at uhub2 port 6 configuration 1 interface 2 "Apple, Inc. Apple Internal Keyboard / Trackpad" rev 2.00/0.77 addr 3
wsmouse0 at ubcmtp0 mux 0
uhub4 at uhub3 port 1 "Apple Inc. BRCM2046 Hub" rev 2.00/1.00 addr 2
ugen1 at uhub4 port 1 "Apple Inc. Bluetooth USB Host Controller" rev 2.00/2.06 addr 3
uhidev3 at uhub4 port 2 configuration 1 interface 0 "Apple Computer product 0x820a" rev 2.00/1.00 addr 4
uhidev3: iclass 3/1, 1 report id
ukbd1 at uhidev3 reportid 1: 8 variable keys, 6 key codes
wskbd1 at ukbd1 mux 1
wskbd1: connecting to wsdisplay0
uhidev4 at uhub4 port 3 configuration 1 interface 0 "Apple Computer product 0x820b" rev 2.00/1.00 addr 5
uhidev4: iclass 3/1, 2 report ids
ums0 at uhidev4 reportid 2: 3 buttons
wsmouse1 at ums0 mux 0
vscsi0 at root
scsibus2 at vscsi0: 256 targets
softraid0 at root
scsibus3 at softraid0: 256 targets
root on wd0a (21442c75caf47c83.a) swap on wd0b dump on wd0b
umass0 at uhub0 port 1 configuration 1 interface 0 "Kingston DataTraveler 2.0" rev 2.00/1.00 addr 3
umass0: using SCSI over Bulk-Only
scsibus4 at umass0: 2 targets, initiator 0
sd0 at scsibus4 targ 1 lun 0: <Kingston, DataTraveler 2.0, 1.00> SCSI2 0/direct removable serial.09511665FD603A07240B
sd0: 7388MB, 512 bytes/sector, 15131636 sectors

[jggimi]

Hi there. Let's look at the PF configuration you are trying to use. I've removed all of the comments:

set skip on lo 
block return 
pass proto udp from any to 224.0.0.251 port mdns allow-opts 
block return in on ! lo0 proto tcp to port 6000:6010

In PF, please note that the last matching rule applies.

1. The loopback interface is ignored.
2. All traffic is blocked. RST or ICMP UNREACHABLE packets are returned for all traffic.
3. Multicast traffic for avahi is passed.
4. XDMCP traffic is blocked.

You cannot reach the internet because the last matching rule is rule #2. All traffic is blocked. You do not have any pass rules for your internet-bound traffic.



When you create or modify PF rules, you will find the PF User's Guide helpful.

[fstef]

hi,
@ocicat: i write the post in a hurry and i forgot to apply the

&

rules. thank you for make it better :-)

@jggimi: thank you for your reply. i read the manual but sometimes RTFMing let me confuse.

i figured it out: uncommented the 3 line of my configuration file and everything work as expected.
Problem solved.

thank's for the help and sorry for bothering

fstef