pf is causing trouble with browsing-->Document contains no data.

[je_fro]

<test>
This post is, in part, a test of my pf.conf. I have a pf.conf on a firewall that's pretty standart...nat and "keep state". However, whenever I try to post on this site, or view my Yahoo mail, I get, after some time, "Document contains no data". So here I am, I've unplugged my firewall and I'm getting my IP straight from my ISP, now everything looks okay. I'm going to google the problem, but does anyone recall having this error?
</test>


(heh...worked without the pf firewall...now to hook it back up.)

[je_fro]

Replying to a thread here is definately not working, (nor is viewing Yahoo Mail) using this pf.conf...

######### Lists and Macros can go Anywhere ######3
services="{ www, https, smtp }"
main_net="192.168.2.0/24"
server_net="192.168.3.0/24"
server_if="ne3"
main_if="ep1"
ext_if="tx0"
########## Tables ############
########## Options ###########
set block-policy drop
set loginterface $ext_if
set optimization normal
########## Scrub #############
scrub in all fragment reassemble
########## Queueing ##########
########## Translation #######
nat on $ext_if from { $main_net, $server_net } to any -> (tx0)
rdr on $ext_if proto tcp from any to any port $services -> 192.168.3.33
########## Filter Rules ######
block in on $ext_if all
pass in quick on lo0 all
pass out quick on lo0 all
pass in on $main_if inet proto tcp from $main_if to any port 22 flags S/SA keep state
pass in on $ext_if inet proto tcp from any to any port $services flags S/SA keep state
block out on $ext_if all
pass out on $ext_if inet proto tcp all flags S/SA keep state
pass out on $ext_if inet proto udp all keep state
pass out on $ext_if inet proto icmp all keep state
pass out on $ext_if proto { tcp, udp } from any to any keep state

A googling I go...
Interesting as I could reply to a PM, but not to any forum.....

[dkeav]

jef, try killing the scrub and see what happens?

[xulfralos]

Did you get this figured out? I don't think scrub has anything to do with that, it works fine for me.

Check out the pf-repository for a bunch of examples, tutorials, articles, etc.

pf-r (https://solarflux.org/pf/)

[dkeav]

jef even tried my config, we dont know what is up

[je_fro]

I figured out that it'll work for a few seconds then quit. I can do simple browsing, but can't delete an e-mail from yahoo or post here through that OpenBSD box. I can't FTP more than about 500k. I'm going to try it on another box to see if it's a hardware thing.....