2017-03-12 80 views
13

我想開我的Mac的端口25,所以我編輯的文件/etc/pf.conf的Mac OSX - 打開一個端口

MacBook-Pro-de-nunito:~ calzada$ more /etc/pf.conf 
# 
# Default PF configuration file. 
# 
# This file contains the main ruleset, which gets automatically loaded 
# at startup. PF will not be automatically enabled, however. Instead, 
# each component which utilizes PF is responsible for enabling and disabling 
# PF via -E and -X as documented in pfctl(8). That will ensure that PF 
# is disabled only when the last enable reference is released. 
# 
# Care must be taken to ensure that the main ruleset does not get flushed, 
# as the nested anchors rely on the anchor point defined here. In addition, 
# to the anchors loaded by this file, some system services would dynamically 
# insert anchors into the main ruleset. These anchors will be added only when 
# the system service is used and would removed on termination of the service. 
# 
# See pf.conf(5) for syntax. 
# 

# 
# com.apple anchor point 
# 
pass in proto tcp from any to any port 80 
pass in proto tcp from any to any port 25 
scrub-anchor "com.apple/*" 
nat-anchor "com.apple/*" 
rdr-anchor "com.apple/*" 
dummynet-anchor "com.apple/*" 
anchor "com.apple/*" 
load anchor "com.apple" from "/etc/pf.anchors/com.apple" 

但是,當我重新啓動該服務,我得到了這些錯誤:

MacBook-Pro-de-nunito:~ calzada$ sudo pfctl -f /etc/pf.conf 
pfctl: Use of -f option, could result in flushing of rules 
present in the main ruleset added by the system at startup. 
See /etc/pf.conf for further details. 

No ALTQ support in kernel 
ALTQ related functions disabled 
/etc/pf.conf:24: Rules must be in order: options, normalization, queueing, translation, filtering 
/etc/pf.conf:25: Rules must be in order: options, normalization, queueing, translation, filtering 
/etc/pf.conf:26: Rules must be in order: options, normalization, queueing, translation, filtering 
pfctl: Syntax error in config file: pf rules not loaded 

在文件的末尾添加行:

MacBook-Pro-de-nunito:~ calzada$ sudo pfctl -f /etc/pf.conf 
pfctl: Use of -f option, could result in flushing of rules 
present in the main ruleset added by the system at startup. 
See /etc/pf.conf for further details. 

No ALTQ support in kernel 
ALTQ related functions disabled 
MacBook-Pro-de-nunito:~ calzada$ nmap -p 25 localhost 

Starting Nmap 7.40 (https://nmap.org) at 2017-03-12 21:35 CET 
Nmap scan report for localhost (127.0.0.1) 
Host is up (0.00023s latency). 
Other addresses for localhost (not scanned): ::1 
PORT STATE SERVICE 
25/tcp closed smtp 

Nmap done: 1 IP address (1 host up) scanned in 0.04 seconds 
+0

嘗試移動你的新「'通過in'」行到*底部*在pf.conf中的文件。我見過的所有例子都有它們。 –

+2

這樣簡潔的帖子標題! – Eduard

回答

6

你確定你有一些監聽端口25?如果您沒有聽到端口25上的任何內容,它將顯示爲關閉。

當您在本地主機上運行nmap時,您甚至不需要通過防火牆允許任何操作。如果流量來自其他設備,則只需通過防火牆即可。

您可以使用以下方法來檢查,如果一個程序上的25端口監聽

lsof -n -i:25 | grep LISTEN