Building the Network You Need with OpenBSD's PF: BSDCan, Ottawa May 6th, 2009
Prev |  | Next

# Debugging your setup

If your setup does not conform to spec - debug

First thing to check: is PF enabled?

    $ sudo pfctl -si | grep Status
    Status: Enabled for 20 days 06:28:24            Debug: Loud

Does enabling/disabling PF make a difference?

Do a ruleset walkthrough, based on `pfctl -s rules` output

    $ sudo pfctl -sr
    scrub in all fragment reassemble
    block return log all
    block return log quick from <bruteforce> to any
    anchor "ftp-proxy/*" all