On Tue, Jan 20, 2026 at 12:09 PM All <[email protected]> wrote:
> Show us your *NEW* pf.conf.
> As many other noted your original was blocking everything
> (you put block at the END of your pf.conf).
>
I added pf=NO to /etc/rc.conf.local so I believe the pf.conf is irrelevant,
no?
And I actually don't need PF. The VM is only accessible from outside my
LAN.
I re-read your original mail, but can't see what IP address is assigned to
> interface.
> ifconfig <interface_name> should help.
>
openbsd# ifconfig
lo0: flags=2008049<UP,LOOPBACK,RUNNING,MULTICAST,LRO> mtu 32768
index 3 priority 0 llprio 3
groups: lo
inet6 ::1 prefixlen 128
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x3
inet 127.0.0.1 netmask 0xff000000
vio0: flags=2808843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST,AUTOCONF4,LRO>
mtu 1500
lladdr bc:24:11:bc:a1:99
index 1 priority 0 llprio 3
groups: egress
media: Ethernet autoselect
status: active
inet 192.168.69.22 netmask 0xffffff00 broadcast 192.168.69.255
enc0: flags=0<>
index 2 priority 0 llprio 3
groups: enc
status: active
openbsd# netstat -rn | head -n 5
Routing tables
Internet:
Destination Gateway Flags Refs Use Mtu Prio
Iface
default 192.168.69.1 UGS 5 198 - 8 vio0
openbsd# /etc/rc.d/sshd check
sshd(ok)
openbsd# egrep -v '^$|^.*#' /etc/ssh/sshd_config
PermitRootLogin yes
AuthorizedKeysFile .ssh/authorized_keys
Subsystem sftp /usr/libexec/sftp-server
openbsd#
> Can you ping that IP? From outside of VM?
>
Yes, I can ping it from across the LAN.
--
Best regards,
Odhiambo WASHINGTON,
Nairobi,KE
+254 7 3200 0004/+254 7 2274 3223
In an Internet failure case, the #1 suspect is a constant: DNS.
"Oh, the cruft.", egrep -v '^$|^.*#' ¯\_(ツ)_/¯ :-)
[How to ask smart questions:
http://www.catb.org/~esr/faqs/smart-questions.html]
