A stateful firewall program, common on BSD systems and also available on others.

learn more… | top users | synonyms

0
votes
0answers
32 views

How to use new keyword dummynet-anchor in pf.conf of Mac OS X

Mac OS X introduced a new keyword “dummynet-anchor” in pf.conf file, which not used in FreeBSD and OpenBSD. The ipfw was removed in Mac OS X 10.10, How to use “dummynet-anchor”? UPDATE: What portion ...
1
vote
0answers
71 views

Port forwarding outgoing request with PF

I'm trying to redirect all outgoing traffic from my local machine on port 843, to go to my local service on port 1234. So, when I make a request to e.g. 1.2.3.4:843, I want it to connect to ...
1
vote
0answers
546 views

Mac OS X Yosemite limiting upload bandwidth

I have ADSL internet, and when there is an application uploading to the internet at full speed (e.g. Skype or Chrome during file uploads), the download bandwidth becomes very very slow. I.e. I cannot ...
0
votes
1answer
89 views

OS X, packet filter (PF), route-to options

I was trying to setup "policy based" routing with pfctl (PF) on OS X 10.10, however no matter what i do, i am getting "syntax error" from pfctl. config is rather simple: cat ./test.conf inf="en0" ...
0
votes
1answer
108 views

Share internet as Bridge instead as a Router using PFCTL (OS X)?

I've got an Airport Time Capsule (TC) and a Macbook Air (MBA) and another PC. The MBA connects the TC wirelessly while the PC connects to the MBA with Ethernet cable. The problem: The MBA takes the ...
0
votes
1answer
75 views

OpenBSD: Prioritizing empty ACKs

There is a wildly used example concerning PF and prioritising empty ACK packets, so that an an asynchronous connections' downstream does not lose performance, if the upstream is clogged up. The ...
0
votes
1answer
1k views

Equivalent iptables command on OS X 10.9

I want to redirect the tcp traffic temporarily to a custom port. On Linux, I use the following command: iptables -t nat -A OUTPUT -p tcp --dport 1935 -m owner \! --uid-owner root -j REDIRECT and to ...
0
votes
0answers
129 views

SOCKS5 proxy only, git wants to use ssh to xx.xx.xx.xx - forward? - mac os

I have SOCKS5 proxy configured and want to work with the git repository, originally cloned from ssh:... So when it tries to connect the error "Network is unreachable" appears. There are a few ...
0
votes
1answer
309 views

allow SSH to bypass VPN on OSX mavericks, openvpn, pf

My home computer connects to the internet through an OpenVPN connection. However, I would like to be able to connect to my home computer from outside over ssh. Ssh is set up and working, but when I ...
0
votes
0answers
124 views

How to block a tcp port using pfctl (instead of ipfw)

ipfw is deprecated and disabled under Mavericks and replaced by pfctl. I have an ipfw-based script that disables IMAP ports (but leaves open SMTP) so that I can send messages at will without being ...
0
votes
1answer
68 views

how to access a range of public IPs only through a VPN?

For security reasons, I am not supposed to access an otherwise public IP range unless a VPN is up. However, if my VPN is down, my system routes to the IP anyway, which is a breach of my obligations. ...
0
votes
1answer
303 views

Configure Packet Filter with white-list and black-list

I’m trying to configure Packet Filter on a FreeBSD server with a black-list of addresses/networks to block and a white-list of trusted users which cannot be blocked (black-listed). Here is my first ...
0
votes
1answer
81 views

OpenBSD pf Egress Filtering

I am attempting to build a simple pf.conf which includes NAT allowing traffic out of the network from all systems on a select series of ports. In my basic configuration I have an internal server that ...
0
votes
2answers
383 views

Packet filter logging [currently with tcpdump in background as root]

I am running OS X Mavericks and use the "packet filter" firewall. However, it seems that "pflogd" is not available. I found that you can create an interface named pflog0 and then use tcpdump to see ...
5
votes
0answers
439 views

OS X: From ipfw to pfctl - Forward port 80 and 443

I found a way to forward ports 80 and 443 to other arbitrary ports (3000 and 3001 in my case) using ipfw. But ipfw is deprecated and replaced by pfctl. Here are my ipfw declarations: sudo ipfw flush ...
2
votes
0answers
1k views

How to open a server port outside of an OpenVPN tunnel with a pf firewall on OSX (BSD)

I have a Mac mini that I use as a media server running XBMC and serves media from my NAS to my stereo and TV (which has been color calibrated with a Spyder3Express, happy). The Mac runs OSX 10.8.2 and ...
4
votes
1answer
230 views

Hints on diagnosing performance issue in OpenBSD firewall

My OpenBSD 4.6 pf firewall has started having really bad performance in the past few weeks. I've isolated the firewall (as opposed to the WAN connection, switch, cable, etc.) as the problem, but need ...