Browse Source

add configuration examples to the default pf.conf file (commented out):

- rdr-anchor "relayd/*": the anchor used by relayd to load
redirections into pf.
- pass in on $ext_if proto icmp to ($ext_if): it is a bad habit to
block icmp, this example proposes to allow it by default.
ok henning@
OPENBSD_4_3
reyk 16 years ago
parent
commit
78458012a0
1 changed files with 3 additions and 1 deletions
  1. +3
    -1
      src/etc/pf.conf

+ 3
- 1
src/etc/pf.conf View File

@ -1,4 +1,4 @@
# $OpenBSD: pf.conf,v 1.34 2007/02/24 19:30:59 millert Exp $
# $OpenBSD: pf.conf,v 1.35 2008/02/29 17:04:55 reyk Exp $
# #
# See pf.conf(5) and /usr/share/pf for syntax and examples. # See pf.conf(5) and /usr/share/pf for syntax and examples.
# Remember to set net.inet.ip.forwarding=1 and/or net.inet6.ip6.forwarding=1 # Remember to set net.inet.ip.forwarding=1 and/or net.inet6.ip6.forwarding=1
@ -15,6 +15,7 @@
#nat-anchor "ftp-proxy/*" #nat-anchor "ftp-proxy/*"
#rdr-anchor "ftp-proxy/*" #rdr-anchor "ftp-proxy/*"
#rdr-anchor "relayd/*"
#nat on $ext_if from !($ext_if) -> ($ext_if:0) #nat on $ext_if from !($ext_if) -> ($ext_if:0)
#rdr pass on $int_if proto tcp to port ftp -> 127.0.0.1 port 8021 #rdr pass on $int_if proto tcp to port ftp -> 127.0.0.1 port 8021
#no rdr on $ext_if proto tcp from <spamd-white> to any port smtp #no rdr on $ext_if proto tcp from <spamd-white> to any port smtp
@ -28,6 +29,7 @@
#pass quick on $int_if no state #pass quick on $int_if no state
#antispoof quick for { lo $int_if } #antispoof quick for { lo $int_if }
#pass in on $ext_if proto icmp to ($ext_if)
#pass in on $ext_if proto tcp to ($ext_if) port ssh #pass in on $ext_if proto tcp to ($ext_if) port ssh
#pass in log on $ext_if proto tcp to ($ext_if) port smtp #pass in log on $ext_if proto tcp to ($ext_if) port smtp
#pass out log on $ext_if proto tcp from ($ext_if) to port smtp #pass out log on $ext_if proto tcp from ($ext_if) to port smtp

Loading…
Cancel
Save