mirror of
https://github.com/fwbuilder/fwbuilder
synced 2026-03-21 18:57:14 +01:00
6a9fdbf3af
should use "(interface)" syntax to the right of "->" in NAT rules. This now works for all interfaces, including those that have ip addresses in fwbuilder configuration, when interface object appears in "Translated Source" in a nat rule. When firewall object appears in "Translated Source", it gets replaced with a set of its interfaces which also get translated into "-> (interface)".
25 lines
494 B
Plaintext
25 lines
494 B
Plaintext
|
|
|
|
|
|
#
|
|
# Rule 1 (NAT)
|
|
nat on eth0 proto {tcp udp icmp} from 192.168.1.0/24 to any -> (eth0)
|
|
|
|
#
|
|
# Rule 0 (eth0)
|
|
block in log quick on eth0 inet from any to 192.168.1.255
|
|
#
|
|
# Rule 1 (lo)
|
|
pass quick on lo inet from any to any keep state
|
|
#
|
|
# Rule 3 (global)
|
|
pass quick inet proto udp from any to 192.168.1.255 port 68 keep state
|
|
#
|
|
# Rule 4 (global)
|
|
block log quick inet from any to any
|
|
#
|
|
# Rule fallback rule
|
|
# fallback rule
|
|
block quick inet from any to any
|
|
|