Hi All,

At 02:30 06/07/2007, David DeSimone wrote:
Do you mean that you checked the session table (pfctl -ss) before and
after running the pfctl -k command, and you find that the session is not
removed?
First, thanks for your help.

I finally found the issue...

I was pinging indefinitely a host to check barring.

Apparently, UDP & TCP are really blocked right after the pfctl -k, but ICMP ping (a ping -t from Windoze) keeps working.

Whatever I attempted to do, I did not succeeded setting up a real barring on all ports & protocols.

I must now check some other weird protocols as AH/ESP to ensure the HotSpot really bars properly traffic.

Brgrds

Laurent LEVIER
Systems & Networks Senior Security Expert, CISSP CISM

_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to