On 2016-06-23 10:29, Pau Amaro-Seoane wrote:
Hi... with these pf rules

wifi=iwn0
wired=em0
set block-policy return
set skip on lo0
match in all scrub
block log all

 I can ping www.google.com without loss
but no browser opens any URL... do you know what's going on?

Thanks!

Pau
_______________________________________________
Openbsd-newbies mailing list
Openbsd-newbies@sfobug.theapt.org
http://mailman.theapt.org/listinfo/openbsd-newbies

Hi, Pau. Last matching rule wins, and your last rule blocks all traffic.

The only packets that will pass through PF are those that use the loopback interface lo0. So either that is not your entire rule set, or PF is disabled.

Ping requires the passing of ICMP protocol ECHO packates, while address
resolution of www.google.com requires the passing of DNS protocol
packets via UDP port 53.
_______________________________________________
Openbsd-newbies mailing list
Openbsd-newbies@sfobug.theapt.org
http://mailman.theapt.org/listinfo/openbsd-newbies

Reply via email to