d/freebsd-nq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add the 'inet' keyword after the nat rule to avoid interfering with

Browse Source 
IPv6.
This commit is contained in:
Rui Paulo 2012-06-28 03:30:17 +00:00
parent 8a5e58a68d
commit 4ba82b1743
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
share/examples/pf/faq-example1
View File

@ -26,7 +26,7 @@ set skip on lo
scrub in scrub in
# nat/rdr # nat/rdr
nat on $ext_if from !($ext_if) -> ($ext_if:0) nat on $ext_if inet from !($ext_if) -> ($ext_if:0)
nat-anchor "ftp-proxy/*" nat-anchor "ftp-proxy/*"
rdr-anchor "ftp-proxy/*" rdr-anchor "ftp-proxy/*"

2
share/examples/pf/pf.conf
View File

@ -16,7 +16,7 @@
#nat-anchor "ftp-proxy/*" #nat-anchor "ftp-proxy/*"
#rdr-anchor "ftp-proxy/*" #rdr-anchor "ftp-proxy/*"
#nat on $ext_if from !($ext_if) -> ($ext_if:0) #nat on $ext_if inet from !($ext_if) -> ($ext_if:0)
#rdr pass on $int_if proto tcp to port ftp -> 127.0.0.1 port 8021 #rdr pass on $int_if proto tcp to port ftp -> 127.0.0.1 port 8021
#no rdr on $ext_if proto tcp from <spamd-white> to any port smtp #no rdr on $ext_if proto tcp from <spamd-white> to any port smtp
#rdr pass on $ext_if proto tcp from any to any port smtp \ #rdr pass on $ext_if proto tcp from any to any port smtp \