mirror of
https://github.com/fwbuilder/fwbuilder
synced 2026-03-19 01:37:17 +01:00
344a22feed
compiler for PF does not need to generate protocol match "proto {tcp
udp icmp}" when service object used in the NAT rule is "any". The
reason this was done this way is lost in the mist of time; it's been
like this since very early versions of fwbuilder.
36 lines
959 B
Plaintext
36 lines
959 B
Plaintext
|
|
|
|
|
|
# NAT compiler errors and warnings:
|
|
# firewall21:NAT:3: warning: Translated Src, Dst and Srv are ignored in the NAT rule with action 'Branch'
|
|
#
|
|
# Rule 0 (NAT)
|
|
nat-anchor "ftp-proxy/*"
|
|
rdr-anchor "ftp-proxy/*"
|
|
#
|
|
# Rule 1 (NAT)
|
|
rdr proto tcp from 192.168.1.0/24 to any port 21 -> 127.0.0.1 port 8021
|
|
#
|
|
# Rule 2 (NAT)
|
|
nat-anchor "NAT_1" from 192.168.1.0/24 to any
|
|
rdr-anchor "NAT_1" from 192.168.1.0/24 to any
|
|
#
|
|
# Rule 3 (NAT)
|
|
# firewall21:NAT:3: warning: Translated Src, Dst and Srv are ignored in the NAT rule with action 'Branch'
|
|
|
|
nat-anchor "NAT_1" from 192.168.1.0/24 to any
|
|
rdr-anchor "NAT_1" from 192.168.1.0/24 to any
|
|
|
|
#
|
|
# Rule 0 (global)
|
|
anchor "ftp-proxy/*" inet from any to any no state
|
|
#
|
|
# Rule 1 (global)
|
|
pass quick inet proto tcp from any to 127.0.0.1 port 8021 flags any
|
|
#
|
|
# Rule fallback rule
|
|
# fallback rule
|
|
block quick inet from any to any no state
|
|
|
|
load anchor NAT_1 from "/etc/fw/firewall21-NAT_1.conf"
|