pf not execute udp port specific block rule

Posted by seaquest on Server Fault See other posts from Server Fault or by seaquest
Published on 2013-10-13T16:27:58Z Indexed on 2013/11/10 15:59 UTC
Read the original article Hit count: 256

Filed under:

freebsd

|

pfsense

|

pf

The traffic I want to block can be sniffed as below with tcpdump:

19:16:22.391164 IP 95.95.95.95.2036 > 10.10.10.10.443: UDP, length 8192

So I wanted to write a rule block any udp destination port 443 traffic.

block drop quick on igb3 inet proto udp to any port 443

Traffic does not match and does not blocked.

However, It matches and blocks if I write rule as below:

block drop quick on igb3 inet proto udp to 10.10.10.10

Do you have any remarks?

I am using pf in Freebsd.

© Server Fault or respective owner

Related posts about freebsd

FreeBSD performance tuning. Sysctls, loader.conf, kernel

as seen on Server Fault - Search for 'Server Fault'
I wanted to share knowledge of tuning FreeBSD via sysctl.conf/loader.conf/KENCONF. It was initially based on Igor Sysoev's (author of nginx) presentation about FreeBSD tuning up to 100,000-200,000 active connections. Tunings are for FreeBSD-CURRENT. Since 7.2 amd64 some of them are tuned well by… >>> More
Boot FreeBSD/FreeNAS (their bootloader) from isolinux?

as seen on Super User - Search for 'Super User'
I'm creating a multiboot cd but have trouble with the FreeNAS/FreeBSD boot loader. If the image has isolinux, its just basically to copy & paste their config, but with the FreeBSD loader its different. Can someone please help me with this one? :) Thanks! >>> More
FreeBSD 8 Kernel Configuration Error Using the VESA Option

as seen on Server Fault - Search for 'Server Fault'
I'm trying to reconfigure FreeBSD 8 (amd64) to allow for a high resolution terminal by following these instructions. The problem is that when I add the two lines: options VESA options SC_PIXEL_MODE and try to build: make buildkernel KERNCONF=VESAKERN I get the following error: /usr/src/sys/amd64/conf/VESAKERN:… >>> More
Ierrs on Network Interface - Pfsense/Freebsd

as seen on Server Fault - Search for 'Server Fault'
Hello all, We're using PfSense as an internal router/firewall (no connection to WAN). Using the Web-GUI, under Status --- Interfaces, there's one particular interface where I have some errors: In/out errors 3513/0 I then SSHed to the firewall to validate the info provided by the WebGUI and… >>> More
Mounting a share with spaces in FreeBSD fstab

as seen on Server Fault - Search for 'Server Fault'
I'm trying to mount a smb network share in fstab on FreeBSD, which works fine for a share without spaces, but fails if a space is in the name. I have replaced the space with \040 which is what everything on google has said, but that didn't help. Share name I'm trying to mount is "Data Backups". Share… >>> More

Related posts about pfsense

Using pfSense, OpenVPN Connects but Still Can't See the Network

as seen on Super User - Search for 'Super User'
I am having an OpenVPN issue. I have a pfSense box at home configured to allow traffic through a VPN tunnel. The client computer is Windows XP Home, behind a standard Comcast connection and a Netgear wireless router. I use OpenVPN to access my work network (from where I am trying to get out of… >>> More
Ierrs on Network Interface - Pfsense/Freebsd

as seen on Server Fault - Search for 'Server Fault'
Hello all, We're using PfSense as an internal router/firewall (no connection to WAN). Using the Web-GUI, under Status --- Interfaces, there's one particular interface where I have some errors: In/out errors 3513/0 I then SSHed to the firewall to validate the info provided by the WebGUI and… >>> More
pfSense Firewall or Linsys/Cisco router for small offices

as seen on Server Fault - Search for 'Server Fault'
I'm about to start switching some networks around for multiple small offices. Each office has about 10 to 15 users and 10 to 15 computers. Each office has a spread of generic routers and access points. The routers vary from being used as routers, to just being an access point for wireless. Nothing… >>> More
Per client DNS server assignment using Pfsense

as seen on Server Fault - Search for 'Server Fault'
I have a network where pfsense is the gateway. There are two sets of clients that I want. One where there will be some restrictions to the network (example, IM being blocked) and one network where there are no restrictions. One easy way I thought about doing this was assigning the different domains… >>> More
Route specific HTTP requests through pfSense OpenVPN

as seen on Server Fault - Search for 'Server Fault'
Hi, to start, I have very little knowledge on routes, iptables, etc. That said, here's what I'm trying to accomplish and where I think I'm stumped: Problem: We have an external website which we recently firewalled so it only accepts traffic from our office IP addresses. This works well at the office… >>> More