Commit Graph

7 Commits

Author SHA1 Message Date
rpaulo
9acfdeb855 Add the 'inet' keyword after the nat rule to avoid interfering with
IPv6.
2012-06-28 03:30:17 +00:00
brucec
f16cfd8316 Update the icmp example to show allowing only the safe types.
Suggested by: Tom Judge <tom at tomjudge.com>
MFC after:	3 days
2011-02-19 14:57:00 +00:00
brucec
de7bef34ba If the pf.conf(5) example file is copied when setting up a firewall it's
easy to forget about icmp. Update the file to show allowing icmp through
the firewall.

PR:	docs/144986
MFC after:	1 month
2011-02-12 20:42:53 +00:00
mlaier
439399edf8 Update pf examples from OpenBSD to catch up with new stateful defaults and
other syntax changes.  Move pf.conf from /etc to examples, too.
2007-11-11 01:16:51 +00:00
ru
cec60429bb Start the dreaded NOFOO -> NO_FOO conversion.
OK'ed by:	core
2004-12-21 08:47:35 +00:00
ru
5db2b9d5b3 For variables that are only checked with defined(), don't provide
any fake value.
2004-10-24 15:33:08 +00:00
mlaier
61e73d53e0 Bring in some examples (and create space for future work here):
- Add OpenBSD example rulesets as advertised in etc/pf.conf and pf.conf(5)
- Tweak the pointer to fit the FreeBSD default location share/examples/pf
- Account for the new directory in BSD.usr.dist (no hier(7) change required
  as share/examples is an opaque item there).

Obtained from:	OpenBSD
Reminded by:	Thomas T. Veldhouse
PR:		docs/71691
MFC after:	2 days
2004-09-14 01:07:19 +00:00