d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
e7145502e1
freebsd-skq/share/examples/pf/faq-example1

52 lines
937 B
Plaintext
Raw Normal View History

Bring in some examples (and create space for future work here): - Add OpenBSD example rulesets as advertised in etc/pf.conf and pf.conf(5) - Tweak the pointer to fit the FreeBSD default location share/examples/pf - Account for the new directory in BSD.usr.dist (no hier(7) change required as share/examples is an opaque item there). Obtained from: OpenBSD Reminded by: Thomas T. Veldhouse PR: docs/71691 MFC after: 2 days
2004-09-14 01:07:19 +00:00
# $FreeBSD$
Update pf examples from OpenBSD to catch up with new stateful defaults and other syntax changes. Move pf.conf from /etc to examples, too.
2007-11-11 01:16:51 +00:00
# $OpenBSD: faq-example1,v 1.5 2006/10/07 04:48:01 mcbride Exp $
Bring in some examples (and create space for future work here): - Add OpenBSD example rulesets as advertised in etc/pf.conf and pf.conf(5) - Tweak the pointer to fit the FreeBSD default location share/examples/pf - Account for the new directory in BSD.usr.dist (no hier(7) change required as share/examples is an opaque item there). Obtained from: OpenBSD Reminded by: Thomas T. Veldhouse PR: docs/71691 MFC after: 2 days
2004-09-14 01:07:19 +00:00
#
# Firewall for Home or Small Office
# http://www.openbsd.org/faq/pf/example1.html
#
# macros
Update pf examples from OpenBSD to catch up with new stateful defaults and other syntax changes. Move pf.conf from /etc to examples, too.
2007-11-11 01:16:51 +00:00
ext_if="fxp0"
int_if="xl0"
Bring in some examples (and create space for future work here): - Add OpenBSD example rulesets as advertised in etc/pf.conf and pf.conf(5) - Tweak the pointer to fit the FreeBSD default location share/examples/pf - Account for the new directory in BSD.usr.dist (no hier(7) change required as share/examples is an opaque item there). Obtained from: OpenBSD Reminded by: Thomas T. Veldhouse PR: docs/71691 MFC after: 2 days
2004-09-14 01:07:19 +00:00
Update pf examples from OpenBSD to catch up with new stateful defaults and other syntax changes. Move pf.conf from /etc to examples, too.
2007-11-11 01:16:51 +00:00
tcp_services="{ 22, 113 }"
icmp_types="echoreq"
comp3="192.168.0.3"
Bring in some examples (and create space for future work here): - Add OpenBSD example rulesets as advertised in etc/pf.conf and pf.conf(5) - Tweak the pointer to fit the FreeBSD default location share/examples/pf - Account for the new directory in BSD.usr.dist (no hier(7) change required as share/examples is an opaque item there). Obtained from: OpenBSD Reminded by: Thomas T. Veldhouse PR: docs/71691 MFC after: 2 days
2004-09-14 01:07:19 +00:00
# options
set block-policy return
set loginterface $ext_if
Update pf examples from OpenBSD to catch up with new stateful defaults and other syntax changes. Move pf.conf from /etc to examples, too.
2007-11-11 01:16:51 +00:00
set skip on lo
Bring in some examples (and create space for future work here): - Add OpenBSD example rulesets as advertised in etc/pf.conf and pf.conf(5) - Tweak the pointer to fit the FreeBSD default location share/examples/pf - Account for the new directory in BSD.usr.dist (no hier(7) change required as share/examples is an opaque item there). Obtained from: OpenBSD Reminded by: Thomas T. Veldhouse PR: docs/71691 MFC after: 2 days
2004-09-14 01:07:19 +00:00
# scrub
Update pf examples from OpenBSD to catch up with new stateful defaults and other syntax changes. Move pf.conf from /etc to examples, too.
2007-11-11 01:16:51 +00:00
scrub in
Bring in some examples (and create space for future work here): - Add OpenBSD example rulesets as advertised in etc/pf.conf and pf.conf(5) - Tweak the pointer to fit the FreeBSD default location share/examples/pf - Account for the new directory in BSD.usr.dist (no hier(7) change required as share/examples is an opaque item there). Obtained from: OpenBSD Reminded by: Thomas T. Veldhouse PR: docs/71691 MFC after: 2 days
2004-09-14 01:07:19 +00:00
# nat/rdr
Add the 'inet' keyword after the nat rule to avoid interfering with IPv6.
2012-06-28 03:30:17 +00:00
nat on $ext_if inet from !($ext_if) -> ($ext_if:0)
Update pf examples from OpenBSD to catch up with new stateful defaults and other syntax changes. Move pf.conf from /etc to examples, too.
2007-11-11 01:16:51 +00:00
nat-anchor "ftp-proxy/*"
rdr-anchor "ftp-proxy/*"
rdr pass on $int_if proto tcp to port ftp -> 127.0.0.1 port 8021
rdr on $ext_if proto tcp from any to any port 80 -> $comp3
Bring in some examples (and create space for future work here): - Add OpenBSD example rulesets as advertised in etc/pf.conf and pf.conf(5) - Tweak the pointer to fit the FreeBSD default location share/examples/pf - Account for the new directory in BSD.usr.dist (no hier(7) change required as share/examples is an opaque item there). Obtained from: OpenBSD Reminded by: Thomas T. Veldhouse PR: docs/71691 MFC after: 2 days
2004-09-14 01:07:19 +00:00
# filter rules
Update pf examples from OpenBSD to catch up with new stateful defaults and other syntax changes. Move pf.conf from /etc to examples, too.
2007-11-11 01:16:51 +00:00
block in
Bring in some examples (and create space for future work here): - Add OpenBSD example rulesets as advertised in etc/pf.conf and pf.conf(5) - Tweak the pointer to fit the FreeBSD default location share/examples/pf - Account for the new directory in BSD.usr.dist (no hier(7) change required as share/examples is an opaque item there). Obtained from: OpenBSD Reminded by: Thomas T. Veldhouse PR: docs/71691 MFC after: 2 days
2004-09-14 01:07:19 +00:00
Update pf examples from OpenBSD to catch up with new stateful defaults and other syntax changes. Move pf.conf from /etc to examples, too.
2007-11-11 01:16:51 +00:00
pass out
Bring in some examples (and create space for future work here): - Add OpenBSD example rulesets as advertised in etc/pf.conf and pf.conf(5) - Tweak the pointer to fit the FreeBSD default location share/examples/pf - Account for the new directory in BSD.usr.dist (no hier(7) change required as share/examples is an opaque item there). Obtained from: OpenBSD Reminded by: Thomas T. Veldhouse PR: docs/71691 MFC after: 2 days
2004-09-14 01:07:19 +00:00
Update pf examples from OpenBSD to catch up with new stateful defaults and other syntax changes. Move pf.conf from /etc to examples, too.
2007-11-11 01:16:51 +00:00
anchor "ftp-proxy/*"
antispoof quick for { lo $int_if }
Bring in some examples (and create space for future work here): - Add OpenBSD example rulesets as advertised in etc/pf.conf and pf.conf(5) - Tweak the pointer to fit the FreeBSD default location share/examples/pf - Account for the new directory in BSD.usr.dist (no hier(7) change required as share/examples is an opaque item there). Obtained from: OpenBSD Reminded by: Thomas T. Veldhouse PR: docs/71691 MFC after: 2 days
2004-09-14 01:07:19 +00:00
Update pf examples from OpenBSD to catch up with new stateful defaults and other syntax changes. Move pf.conf from /etc to examples, too.
2007-11-11 01:16:51 +00:00
pass in on $ext_if inet proto tcp from any to ($ext_if) port $tcp_services
Bring in some examples (and create space for future work here): - Add OpenBSD example rulesets as advertised in etc/pf.conf and pf.conf(5) - Tweak the pointer to fit the FreeBSD default location share/examples/pf - Account for the new directory in BSD.usr.dist (no hier(7) change required as share/examples is an opaque item there). Obtained from: OpenBSD Reminded by: Thomas T. Veldhouse PR: docs/71691 MFC after: 2 days
2004-09-14 01:07:19 +00:00
Update pf examples from OpenBSD to catch up with new stateful defaults and other syntax changes. Move pf.conf from /etc to examples, too.
2007-11-11 01:16:51 +00:00
pass in on $ext_if inet proto tcp from any to $comp3 port 80 \
synproxy state
Bring in some examples (and create space for future work here): - Add OpenBSD example rulesets as advertised in etc/pf.conf and pf.conf(5) - Tweak the pointer to fit the FreeBSD default location share/examples/pf - Account for the new directory in BSD.usr.dist (no hier(7) change required as share/examples is an opaque item there). Obtained from: OpenBSD Reminded by: Thomas T. Veldhouse PR: docs/71691 MFC after: 2 days
2004-09-14 01:07:19 +00:00
Update pf examples from OpenBSD to catch up with new stateful defaults and other syntax changes. Move pf.conf from /etc to examples, too.
2007-11-11 01:16:51 +00:00
pass in inet proto icmp all icmp-type $icmp_types
Bring in some examples (and create space for future work here): - Add OpenBSD example rulesets as advertised in etc/pf.conf and pf.conf(5) - Tweak the pointer to fit the FreeBSD default location share/examples/pf - Account for the new directory in BSD.usr.dist (no hier(7) change required as share/examples is an opaque item there). Obtained from: OpenBSD Reminded by: Thomas T. Veldhouse PR: docs/71691 MFC after: 2 days
2004-09-14 01:07:19 +00:00
Update pf examples from OpenBSD to catch up with new stateful defaults and other syntax changes. Move pf.conf from /etc to examples, too.
2007-11-11 01:16:51 +00:00
pass quick on $int_if no state
Reference in New Issue Copy Permalink