[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

x11 forwarding does not work until pf is disabled

I'm running current (built a few hours ago) on a test machine. 
I'm connecting via ssh (from a windows box) and I try to launch an X
X forwarding fails, here is a sample output:

~ $ xclock &
[1] 10951
~ $ Error: Can't open display: localhost:11.0

Unfortunately, as you see, I'm not able to forward X11 until I disable
pf (pfctl -d).
After disabling pf, forwarding works well and I'm able to forward any X

Did I miss something, what is my problem?
Thank you very much

Here is the (simple) pf.conf of the ssh server:
table <friends> persist 
table <hostile> persist

set loginterface $ext_if

scrub in on $ext_if fragment reassemble


block log quick inet from <hostile>
block quick inet6
block log (all) all

pass quick on lo0
pass in quick on $ext_if inet proto tcp from <friends> to $ext_if\
       port 22 modulate state label ssh
pass out quick on $ext_if inet proto { tcp, udp } from $ext_if to any \
        keep state label out_traffic

Visit your host, monkey.org