mirror of
https://github.com/fwbuilder/fwbuilder
synced 2025-10-16 15:38:43 +02:00
appropriate". Compiler for PF now uses keyword 'self' in rules where firewall object is used in Source or Destination.
33 lines
868 B
Plaintext
33 lines
868 B
Plaintext
|
|
|
|
|
|
|
|
# Tables: (2)
|
|
table <tbl.r0.s> { 192.168.1.10 , 192.168.1.20 }
|
|
table <tbl.r2.s> { 192.168.1.0/24 , 192.168.2.0/24 }
|
|
|
|
# Policy compiler errors and warnings:
|
|
# firewall11:Policy:0: warning: Changing rule direction due to self reference
|
|
# firewall11:Policy:1: warning: Changing rule direction due to self reference
|
|
#
|
|
# Rule 0 (global)
|
|
# firewall11:Policy:0: warning: Changing rule direction due to self reference
|
|
|
|
pass in quick inet proto tcp from <tbl.r0.s> to self port 22 flags S/SA keep state
|
|
#
|
|
# Rule 1 (global)
|
|
# firewall11:Policy:1: warning: Changing rule direction due to self reference
|
|
|
|
block in quick inet from any to self
|
|
#
|
|
# Rule 2 (global)
|
|
pass quick inet from <tbl.r2.s> to any keep state
|
|
#
|
|
# Rule 3 (global)
|
|
block quick inet from any to any
|
|
#
|
|
# Rule fallback rule
|
|
# fallback rule
|
|
block quick inet from any to any
|
|
|