use proper address, ok spz@.
This commit is contained in:
parent
f80058aa23
commit
5c4c6feb2f
@ -1,4 +1,4 @@
|
||||
# $NetBSD: host-npf.conf,v 1.7 2014/05/31 11:54:37 spz Exp $
|
||||
# $NetBSD: host-npf.conf,v 1.8 2014/08/04 22:13:23 szptvlfn Exp $
|
||||
#
|
||||
# this is an example of NPF rules for a host (i.e., not routing) with
|
||||
# two network interfaces, wired and wifi
|
||||
@ -65,7 +65,7 @@ group "wired" on $wired_if {
|
||||
|
||||
pass stateful in final family inet6 proto udp to $wired_v6 \
|
||||
port $services_udp
|
||||
pass stateful in final family inet4 proto udp to $wired_v6 \
|
||||
pass stateful in final family inet4 proto udp to $wired_v4 \
|
||||
port $services_udp
|
||||
|
||||
# only SYN packets need to generate state
|
||||
@ -93,7 +93,7 @@ group "wifi" on $wifi_if {
|
||||
pass out final family inet6 proto ipv6-icmp from ff00::/10
|
||||
|
||||
pass in final family inet6 proto ipv6-icmp to $wifi_v6
|
||||
pass in final family inet4 proto icmp to $wifi_v6
|
||||
pass in final family inet4 proto icmp to $wifi_v4
|
||||
|
||||
pass in final family inet4 proto tcp \
|
||||
from any port bootps to $wifi_v4 port bootpc
|
||||
|
Loading…
Reference in New Issue
Block a user