Browse Source

Allow outbound ping in initial pf rules.

dhclient needs this to validate old (but valid) leases in
/var/db/dhclient.leases in case it needs to fall back to such a
lease.  (the dhcp server can be down or not responding)
Reported by Chris Jepeway.
"makes sense"  henning dhartmei
OPENBSD_3_3
camield 22 years ago
parent
commit
1331f9dd50
1 changed files with 2 additions and 1 deletions
  1. +2
    -1
      src/etc/rc

+ 2
- 1
src/etc/rc View File

@ -1,4 +1,4 @@
# $OpenBSD: rc,v 1.214 2003/01/06 20:40:39 marc Exp $
# $OpenBSD: rc,v 1.215 2003/01/15 09:25:46 camield Exp $
# System startup script run by init on autoboot # System startup script run by init on autoboot
# or after single-user. # or after single-user.
@ -122,6 +122,7 @@ if [ "X${pf}" != X"NO" ]; then
RULES="block all" RULES="block all"
RULES="$RULES\npass in proto tcp from any to any port 22 keep state" RULES="$RULES\npass in proto tcp from any to any port 22 keep state"
RULES="$RULES\npass out proto { tcp, udp } from any to any port 53 keep state" RULES="$RULES\npass out proto { tcp, udp } from any to any port 53 keep state"
RULES="$RULES\npass out inet proto icmp all icmp-type echoreq keep state"
case `sysctl vfs.mounts.nfs 2>/dev/null` in case `sysctl vfs.mounts.nfs 2>/dev/null` in
*[1-9]*) *[1-9]*)
# don't kill NFS # don't kill NFS


Loading…
Cancel
Save