mirror of
https://github.com/fwbuilder/fwbuilder
synced 2026-03-20 10:17:16 +01:00
344a22feed
compiler for PF does not need to generate protocol match "proto {tcp
udp icmp}" when service object used in the NAT rule is "any". The
reason this was done this way is lost in the mist of time; it's been
like this since very early versions of fwbuilder.
25 lines
473 B
Plaintext
25 lines
473 B
Plaintext
|
|
|
|
|
|
#
|
|
# Rule 1 (NAT)
|
|
nat on eth0 from 192.168.1.0/24 to any -> (eth0)
|
|
|
|
#
|
|
# Rule 0 (eth0)
|
|
block in log quick on eth0 inet from any to 192.168.1.255
|
|
#
|
|
# Rule 1 (lo)
|
|
pass quick on lo inet from any to any keep state
|
|
#
|
|
# Rule 3 (global)
|
|
pass quick inet proto udp from any to 192.168.1.255 port 68 keep state
|
|
#
|
|
# Rule 4 (global)
|
|
block log quick inet from any to any
|
|
#
|
|
# Rule fallback rule
|
|
# fallback rule
|
|
block quick inet from any to any
|
|
|