내 pf 설정에는 다음과 같은 규칙이 있습니다.
block drop in log (user) proto udp from any to any port = 137
block drop in log (user) proto udp from any to any port = 138
block drop in log (user) proto udp from any to any port = 139
block drop in log (user) proto udp from any to any port = 445
block drop in log (user) proto tcp from any to any port = 137
block drop in log (user) proto tcp from any to any port = 138
block drop in log (user) proto tcp from any to any port = 139
block drop in log (user) proto tcp from any to any port = 445
pass in proto udp from <192.168-net> to any port = 137 keep state
pass in proto udp from <192.168-net> to any port = 138 keep state
pass in proto udp from <192.168-net> to any port = 139 keep state
pass in proto udp from <192.168-net> to any port = 445 keep state
pass in proto tcp from <192.168-net> to any port = 137 flags S/SA keep state
pass in proto tcp from <192.168-net> to any port = 138 flags S/SA keep state
pass in proto tcp from <192.168-net> to any port = 139 flags S/SA keep state
pass in proto tcp from <192.168-net> to any port = 445 flags S/SA keep state
pass in proto udp from <ipv6-local-nets> to any port = 137 keep state
pass in proto udp from <ipv6-local-nets> to any port = 138 keep state
pass in proto udp from <ipv6-local-nets> to any port = 139 keep state
pass in proto udp from <ipv6-local-nets> to any port = 445 keep state
pass in proto tcp from <ipv6-local-nets> to any port = 137 flags S/SA keep state
pass in proto tcp from <ipv6-local-nets> to any port = 138 flags S/SA keep state
pass in proto tcp from <ipv6-local-nets> to any port = 139 flags S/SA keep state
pass in proto tcp from <ipv6-local-nets> to any port = 445 flags S/SA keep state
로깅을 보니
block drop in log (user) proto tcp from any to any port = 445
192.168.2.91에서 트리거됩니다. 어떻게 그게 가능합니까?
pass in proto tcp from <192.168-net> to any port = 445 flags S/SA keep state
다른 규칙 세트(제출 포트용)를 사용하여 정기적으로 다른 클라이언트에서도 동일한 일이 발생합니다. 둘 다 Wi-Fi를 통해 연결됩니다. 서비스에는 영향이 없는 것 같은데, 차단된 패킷의 로그 메시지가 어떻게 가능한지 궁금합니다. 나는 깃발과 관련이 있다고 생각하지만 어떻게 그런 일이 일어날 수 있는지 잘 이해하지 못합니다. 패킷이 손상된 것이 아닐까요?
클라이언트와 서버 모두에서 macOS Mojave를 실행하고 있습니다.