Also deny 127.0.0.0/8 going out.

Submitted by:	grimes
This commit is contained in:
David E. O'Brien 2001-03-05 20:51:40 +00:00
parent 6281b30a73
commit 20335a31ad
Notes: svn2git 2020-12-20 02:59:44 +00:00
svn path=/head/; revision=73785

View File

@ -128,8 +128,9 @@ esac
#
${fwcmd} add 100 pass all from any to any via lo0
${fwcmd} add 200 deny all from any to 127.0.0.0/8
${fwcmd} add 300 deny ip from 127.0.0.0/8 to any
# If you're using 'options BRIDGE', uncomment the following line to pass ARP
#${fwcmd} add 300 pass udp from 0.0.0.0 2054 to 0.0.0.0
#${fwcmd} add 400 pass udp from 0.0.0.0 2054 to 0.0.0.0
# Prototype setups.