Re[2]: 03.06.2015-18:19:56 :: Something smarter than us is going to emerge


node:	Re[2]: 03.06.2015-18:19:56
template:	4
parent:	Re: 03.06.2015-18:19:56
owner:	schrapnel
viewed by:
created:	04.06.2015 - 12:53:28

cwbe coordinatez:
101
63540
63542
2109677
1857521
7928822
7929153
7929466

ABSOLUT
KYBERIA

permissions
you:	r,
system:	public
net:	yes

ja ssh mam pristupne na interface pre wifi a en0. Ale nie pre tun0, ktory je virtualny interface VPNky.

000001010006354000063542021096770185752107928822079291530792946607929553

hod sem obsah /etc/pf.conf

00000101000635400006354202109677018575210792882207929153079294660792955307929613

cat /etc/pf.conf | grep -v '^#'

scrub-anchor "com.apple/*"
nat-anchor "com.apple/*"
rdr-anchor "com.apple/*"
dummynet-anchor "com.apple/*"
anchor "com.apple/*"
load anchor "com.apple" from "/etc/pf.anchors/com.apple"

cat /etc/pf.anchors/com.apple
#
# com.apple ruleset, referred to by the default /etc/pf.conf file.
# See notes in that file regarding the anchor point in the main ruleset.
#
# Copyright (c) 2011 Apple Inc. All rights reserved.
#

#
# AirDrop anchor point.
#
anchor "200.AirDrop/*"

#
# Application Firewall anchor point.
#
anchor "250.ApplicationFirewall/*"

0000010100063540000635420210967701857521079288220792915307929466079295530792961307929642

vygidor 04.06.2015 - 14:56:53 (modif: 04.06.2015 - 15:02:28), level: 3, UP NEW !!CONTENT CHANGED!!

Re[5]: 03.06.2015-18:19:56

som na to sice noob, ale sipim, ci to nie je chybajuce/zle pravidlo/anchorset (alebo zle umiestnene - za drop-mi) v ruloch pre ten nut0 interface.

skus tam pridat
pass in proto tcp from any to any port 22
reloadni cez
sudo pfctl -vnf /etc/pf.conf a restartni.

mozno som uplne mimo, ale primarne mi to pripada, ze na tun0 interface to dropuje, nevidim ho ani v tom tvojom nestat outpute.

edit: este som zabudol, ze by som checkol com.apple/250.ApplicationFirewall, co vsetko je tam nastavene na drop. vecer pozriem na svojom.

000001010006354000063542021096770185752107928822079291530792946607929553079296130792964207930175

nj, k tomu rieseniu som sa postupom casu tiez dopracoval, ale nefunguje to :( stale fileterd.

00000101000635400006354202109677018575210792882207929153079294660792955307929613079296420793017507930198

uff :/

daj to na stackoverflow .)