Browse Source

'keep state' is now default, and use 'no state' where intended.

OPENBSD_4_1
mcbride 18 years ago
parent
commit
760e51f118
1 changed files with 6 additions and 6 deletions
  1. +6
    -6
      src/etc/pf.conf

+ 6
- 6
src/etc/pf.conf View File

@ -1,4 +1,4 @@
# $OpenBSD: pf.conf,v 1.31 2006/01/30 12:20:31 camield Exp $
# $OpenBSD: pf.conf,v 1.32 2006/10/07 01:50:22 mcbride Exp $
# #
# See pf.conf(5) and /usr/share/pf for syntax and examples. # See pf.conf(5) and /usr/share/pf for syntax and examples.
# Remember to set net.inet.ip.forwarding=1 and/or net.inet6.ip6.forwarding=1 # Remember to set net.inet.ip.forwarding=1 and/or net.inet6.ip6.forwarding=1
@ -25,11 +25,11 @@
#anchor "ftp-proxy/*" #anchor "ftp-proxy/*"
#block in #block in
#pass out keep state
#pass out
#pass quick on $int_if
#pass quick on $int_if no state
#antispoof quick for { lo $int_if } #antispoof quick for { lo $int_if }
#pass in on $ext_if proto tcp to ($ext_if) port ssh keep state
#pass in log on $ext_if proto tcp to ($ext_if) port smtp keep state
#pass out log on $ext_if proto tcp from ($ext_if) to port smtp keep state
#pass in on $ext_if proto tcp to ($ext_if) port ssh
#pass in log on $ext_if proto tcp to ($ext_if) port smtp
#pass out log on $ext_if proto tcp from ($ext_if) to port smtp

Loading…
Cancel
Save