Questions tagged [pfctl]
The pfctl tag has no usage guidance.
0
votes
1answer
22 views
Redirect IP traffic with 'pfctl' on macOS
I'm working on a mac with OS 10.13.6.
I want to redirect all requests to 10.20.154.24:1111 made from my computer go to localhost:8080.
I read about pf and pfctl, but could not make this work.
I ...
0
votes
0answers
20 views
`pf` - No ALTQ support in kernel - ALTQ related functions disabled
I'm using pf on my server, and it's working great. So much easier to use than ipfw (after some initial config confusion). But there is one thing that is driving me nuts....
I'm sure you probably ...
1
vote
0answers
102 views
use `pf` to allow TCP traffic on specific port (from specific subnet)
So, I've read various posts about how to use both the Application Firewall (apf or socketfilterfw) and the Packet Filter (pf) at the same time. I thought this would be straightfoward since I'm not a ...
0
votes
0answers
41 views
How to redirect network traffic with pfctl
I'm trying to recreate this command from linux to macOS, using pfctl:
iptables -t nat -A PREROUTING -p tcp --dport 80 -j DNAT --to-destination 192.168.9.37
This command should redirect all traffic ...
2
votes
0answers
15 views
Getting notification when firewall settings have changed
I'm using packet filter engine to setup my Firewall connection. However, there might be other entities that may override my firewall settings on the same way (processes running with 'root' privileges ...
0
votes
0answers
58 views
Passing L2TP over IPSec VPN through a `pf` Firewall
I am trying to set up some custom firewall rules in the pf firewall in macOS (10.11 in this case). These are traditional network-based rules, not application-specific rules. I'm having some issues:
...
1
vote
1answer
222 views
Mapping port 80 to 8080 but maintain explicit 8080 access
I followed the instructions in this answer to map port 8080 to 80 on my mac. This works a treat, except for the fact that I can no-longer access http://localhost:8080 explicitly through Chrome (it ...
1
vote
1answer
139 views
Is the firewall really pfctl, or another instance of pfctl?
I was mucking around with pfctl a while back, didn't get very far and forgot about it.
Yesterday, I couldn't ssh into a remote machine. I disabled the firewall in system preferences but still had the ...
2
votes
1answer
329 views
pfctl to add rules at runtime WITHOUT editing /etc/pf.conf?
I have an app that (while it is running and only while it is running) needs to make changes to the packet filter (pf) so that it blocks or allows certain traffic. These rules should be in addition to ...
0
votes
0answers
84 views
proper syntax for pfctl from iptables on Macox
What would the proper syntax to get this to work on a Mac Os 10.13
iptables -t mangle -A PREROUTING -s 10.0.1.144 -j ROUTE --tee --gw 10.0.1.120
iptables -t mangle -A POSTROUTING -d 10.0.1.144 -j ...
4
votes
1answer
472 views
Redirect Local Port through bridge to Internet Shared static IP
I have my cable modem (10.0.0.1) to my iMac (10.0.0.36), and my iMac (10.0.0.36) with a (bridge100 192.168.2.1) Internet Shared IP to my debian machine (192.168.2.34), and all of that is working ...
5
votes
1answer
2k views
pfctl - howto add an anchor and make it active / load it
So i can add an anchor to the already enabled firewall by doing something like this:
$ pfctl -a anchor_name -f /etc/anchor_rules.txt
the file "anchor_rules.txt" might contain something like this:
...
