Port 0 and IPv4 Great... but hey what about IPv6 or inet6?

[JonathanLee]

@JonathanLee

pfctl -sr -a custom/block_port0

So it works but they are not part of the main ruleset they are loaded and working

[johnpoz]

@JonathanLee said in Port 0 and IPv4 Great... but hey what about IPv6 or inet6?:

This is ipv4 only.... if you use a ipv6 tunnel broker you will never see an ipv6 rule and guess what the GUI does not allow you to create a floating rule with port zero.

huh.. the rules are there for both IPv4 and v6

cat /tmp/rules.debug

# We use the mighty pf, we cannot be fooled.
block  quick inet proto { tcp, udp } from any port = 0 to any ridentifier 1000000114 label "Block traffic from port 0"
block  quick inet proto { tcp, udp } from any to any port = 0 ridentifier 1000000115 label "Block traffic to port 0"
block  quick inet6 proto { tcp, udp } from any port = 0 to any ridentifier 1000000116 label "Block traffic from port 0"
block  quick inet6 proto { tcp, udp } from any to any port = 0 ridentifier 1000000117 label "Block traffic to port 0"

[JonathanLee]

@johnpoz I noticed that my setup was missing part of the IPv6 rule, even though IPv6 is enabled. I'm not sure if it's due to the older version I'm using. Thanks for taking a look!

[johnpoz]

@JonathanLee what version are you running?

[JonathanLee]

@johnpoz 25.03.01

[johnpoz]

@JonathanLee so some old beta snapshot? Why?

[JonathanLee]

@johnpoz it is the last one where Squid status page works, I am using it to attempt to figure out why in the new versions the status page does not work correctly. Plus it is my everything works version. Just every thing works how I wanted in this version, I feel very strongly about this version. I would love to update but the Squid status page is not working for me in the new versions.

[johnpoz]

@JonathanLee is there a thread where you give details of this status page not working? Is there a current redmine on it?

Using some old "beta" version is not proper way to go about getting something not working fixed.

[JonathanLee]

@johnpoz There is a redmine open on it yes.

This is it

https://redmine.pfsense.org/issues/15410

except it is now Squid 7.1 that is stable and has the issue

[JonathanLee]

@johnpoz This even does this with the newest CE edition inside of UTM virtualized environment outside of the 2100s

It is not just the 2100s this is set up for standard stuff everything else works with it just the status page