Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

The traffic I want to block can be sniffed as below with tcpdump:

19:16:22.391164 IP 95.95.95.95.2036 > 10.10.10.10.443: UDP, length 8192

So I wanted to write a rule block any udp destination port 443 traffic.

block drop quick on igb3 inet proto udp to any port 443

Traffic does not match and does not blocked.

However, It matches and blocks if I write rule as below:

block drop quick on igb3 inet proto udp to 10.10.10.10

Do you have any remarks?

I am using pf in Freebsd.

share|improve this question

Try: block drop quick on igb3 inet proto udp from any to any port 443

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.