|
|
@ -1,4 +1,4 @@ |
|
|
# $OpenBSD: pf.conf,v 1.44 2009/06/10 15:29:34 sobrado Exp $ |
|
|
|
|
|
|
|
|
# $OpenBSD: pf.conf,v 1.45 2009/09/01 13:51:19 henning Exp $ |
|
|
# |
|
|
# |
|
|
# See pf.conf(5) for syntax and examples; this sample ruleset uses |
|
|
# See pf.conf(5) for syntax and examples; this sample ruleset uses |
|
|
# require-order to permit mixing of NAT/RDR and filter rules. |
|
|
# require-order to permit mixing of NAT/RDR and filter rules. |
|
|
@ -7,24 +7,13 @@ |
|
|
|
|
|
|
|
|
set skip on lo |
|
|
set skip on lo |
|
|
|
|
|
|
|
|
# NAT/filter rules and anchors for ftp-proxy(8) |
|
|
|
|
|
#nat-anchor "ftp-proxy/*" |
|
|
|
|
|
#rdr-anchor "ftp-proxy/*" |
|
|
|
|
|
#rdr pass on ! egress proto tcp to port ftp -> 127.0.0.1 port 8021 |
|
|
|
|
|
|
|
|
# filter rules and anchor for ftp-proxy(8) |
|
|
#anchor "ftp-proxy/*" |
|
|
#anchor "ftp-proxy/*" |
|
|
#pass out proto tcp from $proxy to any port ftp |
|
|
|
|
|
|
|
|
#pass in quick proto tcp to port ftp rdr-to 127.0.0.1 port 8021 |
|
|
|
|
|
|
|
|
# NAT/filter rules and anchors for relayd(8) |
|
|
|
|
|
#rdr-anchor "relayd/*" |
|
|
|
|
|
|
|
|
# anchor for relayd(8) |
|
|
#anchor "relayd/*" |
|
|
#anchor "relayd/*" |
|
|
|
|
|
|
|
|
# NAT rules and anchors for spamd(8) |
|
|
|
|
|
#table <spamd-white> persist |
|
|
|
|
|
#table <nospamd> persist file "/etc/mail/nospamd" |
|
|
|
|
|
#no rdr on egress proto tcp from <nospamd> to any port smtp |
|
|
|
|
|
#no rdr on egress proto tcp from <spamd-white> to any port smtp |
|
|
|
|
|
#rdr pass on egress proto tcp from any to any port smtp -> 127.0.0.1 port spamd |
|
|
|
|
|
|
|
|
|
|
|
pass # to establish keep-state |
|
|
pass # to establish keep-state |
|
|
|
|
|
|
|
|
#block in quick from urpf-failed to any # use with care |
|
|
#block in quick from urpf-failed to any # use with care |
|
|
|
henning
15 years ago