Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    allow all traffic on loopback interface

    Scheduled Pinned Locked Moved Firewalling
    1 Posts 1 Posters 376 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • G
      gred
      last edited by

      fd0f54f44b5c(RELENG_2_5_0) pfSense amd64

      I need to allow all traffic on lo0, however I see the default rule for ipv6, that's working:
      [2.5.2-RELEASE][greg@lviv.qarea.org]/home/greg: ping6 ::1
      PING6(56=40+8+8 bytes) ::1 --> ::1
      16 bytes from ::1, icmp_seq=0 hlim=64 time=0.104 ms
      16 bytes from ::1, icmp_seq=1 hlim=64 time=0.074 ms
      16 bytes from ::1, icmp_seq=2 hlim=64 time=0.070 ms

      but no WORKING rule for ipv4 present, effectively disabling nearly all services that are needed to be accessible through 127.0.0.1:

      [2.5.2-RELEASE][greg@lviv.qarea.org]/home/greg: ping 127.0.0.1
      PING 127.0.0.1 (127.0.0.1): 56 data bytes
      ping: sendto: Can't assign requested address
      ping: sendto: Can't assign requested address
      ping: sendto: Can't assign requested address
      ^C
      --- 127.0.0.1 ping statistics ---
      3 packets transmitted, 0 packets received, 100.0% packet loss

      [2.5.2-RELEASE][greg@lviv.qarea.org]/home/greg: ifconfig lo0
      lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
      options=680003<RXCSUM,TXCSUM,LINKSTATE,RXCSUM_IPV6,TXCSUM_IPV6>
      inet6 ::1 prefixlen 128
      inet6 fe80::1%lo0 prefixlen 64 scopeid 0x7
      inet 127.0.0.1 netmask 0xff000000
      groups: lo
      nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>

      in "usual" pf. I can do:
      set skip on lo0

      or:
      pass on lo0 keep state

      i only see the default rules like this:

      @41(1000008961) pass in on lo0 inet all flags S/SA keep state label "pass IPv4 loopback"
      [ Evaluations: 445249 Packets: 0 Bytes: 0 States: 0 ]
      [ Inserted: pid 6692 State Creations: 0 ]
      @42(1000008962) pass out on lo0 inet all flags S/SA keep state label "pass IPv4 loopback"
      [ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
      [ Inserted: pid 6692 State Creations: 0 ]

      and it doesn't seem to work correctly
      thank you

      1 Reply Last reply Reply Quote 0
      • First post
        Last post
      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.