Aren
/
NetBSD
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Revert previous & just use the inets function to handle both address families. 

Heads up by <leot>
This commit is contained in:
sevan 2019-04-11 09:59:24 +00:00
parent 991dc94f90
commit d421b01773
1 changed files with 2 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
share/examples/npf/soho_gw-npf.conf
View File

@ -1,4 +1,4 @@
# $NetBSD: soho_gw-npf.conf,v 1.10 2019/04/10 23:14:46 sevan Exp $
# $NetBSD: soho_gw-npf.conf,v 1.11 2019/04/11 09:59:24 sevan Exp $
#
# SOHO border
#
@ -8,8 +8,7 @@
$ext_if = "wm0"
$ext_v4 = inet4(wm0)
$ext_addrs = inet4(wm0)
$ext_addrs6 = inet6(wm0)
$ext_addrs = inets(wm0)
$int_if = "wm1"
@ -43,15 +42,11 @@ group "external" on $ext_if {
apply "log"
pass stateful in final proto tcp to $ext_addrs port $services_tcp
pass stateful in final proto udp to $ext_addrs port $services_udp
pass stateful in final family inet6 proto tcp to $ext_addrs6 port $services_tcp
pass stateful in final family inet6 proto udp to $ext_addrs6 port $services_udp
# Passive FTP
pass stateful in final proto tcp to $ext_addrs port 49151-65535
pass stateful in final family inet6 proto tcp to $ext_addrs6 port 49151-65535
# Traceroute
pass stateful in final proto udp to $ext_addrs port 33434-33600
pass stateful in final family inet6 proto udp to $ext_addrs6 port 33434-33600
}
group "internal" on $int_if {