Browse Source

"pass on lo0" in the intermediate pf ruleset loaded during boot.

solves PR3376 by matthew.gream@pobox.com, fix slightly different
ok mcbride@ deraadt@
OPENBSD_3_4
henning 21 years ago
parent
commit
3713c29461
1 changed files with 2 additions and 1 deletions
  1. +2
    -1
      src/etc/rc

+ 2
- 1
src/etc/rc View File

@ -1,4 +1,4 @@
# $OpenBSD: rc,v 1.227 2003/05/14 18:41:06 ian Exp $
# $OpenBSD: rc,v 1.228 2003/07/29 17:52:17 henning Exp $
# System startup script run by init on autoboot # System startup script run by init on autoboot
# or after single-user. # or after single-user.
@ -120,6 +120,7 @@ ttyflags -a
if [ "X${pf}" != X"NO" ]; then if [ "X${pf}" != X"NO" ]; then
RULES="block all" RULES="block all"
RULES="$RULES\npass on lo0"
RULES="$RULES\npass in proto tcp from any to any port 22 keep state" RULES="$RULES\npass in proto tcp from any to any port 22 keep state"
RULES="$RULES\npass out proto { tcp, udp } from any to any port 53 keep state" RULES="$RULES\npass out proto { tcp, udp } from any to any port 53 keep state"
RULES="$RULES\npass out inet proto icmp all icmp-type echoreq keep state" RULES="$RULES\npass out inet proto icmp all icmp-type echoreq keep state"


Loading…
Cancel
Save