Update the icmp example to show allowing only the safe types.

Suggested by: Tom Judge <tom at tomjudge.com>
MFC after:	3 days
This commit is contained in:
Rebecca Cran 2011-02-19 14:57:00 +00:00
parent c67f41d01d
commit 9c73eae9c4

View File

@ -32,4 +32,4 @@
#pass in on $ext_if proto tcp to ($ext_if) port ssh
#pass in log on $ext_if proto tcp to ($ext_if) port smtp
#pass out log on $ext_if proto tcp from ($ext_if) to port smtp
#pass in on $ext_if proto icmp to ($ext_if)
#pass in on $ext_if inet proto icmp from any to ($ext_if) icmp-type { unreach, redir, timex }