rename to follow suit.

add an L2TP Gateway example.

branches: 1.1.2; 1.1.4; 1.1.6; 1.1.8;
actually install the new npf examples
add examples for a hash table file and a tree table file
add an ID string to host-npf.conf

branches: 1.1.4; 1.1.6; 1.1.8;
actually install the new npf examples
add examples for a hash table file and a tree table file
add an ID string to host-npf.conf

Use proper variables for interface names in examples.

branches: 1.11.8;
With bin/54124 fixed, the rule needs to be explicitly set to stateful.

branches: 1.10.2;
Indent to improve readability.
Add a description for log event.

Provide a simpler config for a host which permits any traffic from the host out,
and small subset of traffic in (DHCP (v4 and v6), All ICMPv6, ICMP echo
requests, traceroute, mDNS).

branches: 1.8.24;
use proper address, ok spz@.

example for port remapping added

branches: 1.6.2;
Sync some NPF config examples with the reality.

track syntax change in npf.conf regarding group

Fix syntax error in the example, fix one rule and G/C "rid" procedure.

adjust to current npf.conf syntax

branches: 1.2.2; 1.2.4; 1.2.6; 1.2.8;
actually install the new npf examples
add examples for a hash table file and a tree table file
add an ID string to host-npf.conf

add an example for a npf.conf
It probably could do with polishing of both rules and comments, but meh,
better than nothing

remove file that did not go before.

add an L2TP Gateway example.

Add $NetBSD$ tag.

branches: 1.5.4;
- match up comment and interface identifiers
- use RFC5737 documentation prefixes
- use a variable for the RFC1918 private address ranges

need esp

just allow l2tp not regular ipsec.

branches: 1.2.2; 1.2.4;
track syntax change in npf.conf regarding group

rename to follow suit.

Use proper variables for interface names in examples.

branches: 1.20.8;
Rename the block table to something else to make it easier to differentiate
between action and name. Use this table as the example for populating by npfctl.

Drop the int-block table, it's quite cumbersome to have a firewall which
needs the internal network lists added if reboot. Use the localnet variable to
indicated which network we should pass in traffic from instead.

Add support for blacklistd

Passive FTP works as a client without this and we're not hosting an FTP server (port are not listed in services_tcp)

pastos

improve description

Add descriptions for all rules and make use of localnet variable in place of direct IP address

default policy is to blockall

Drop the final keyword to use the default policy of last matching rule wins

branches: 1.12.2;
s/ifnets/ifaddrs

Revert previous & just use the inets function to handle both address families.
Heads up by <leot>

typo

Use a separate variable for IPv6.
Found with npfctl validate.

Switch out deprecated keywords.
Found with npfctl validate.

Fix cvs id.

branches: 1.6.24; 1.6.26;
Sync some NPF config examples with the reality.

track syntax change in npf.conf regarding group

Fix syntax error in the example, fix one rule and G/C "rid" procedure.

adjust to current npf.conf syntax

branches: 1.2.2; 1.2.4; 1.2.6; 1.2.8;
add id string, fix comments

the example from the man page, with a few extra comments

branches: 1.1.4; 1.1.6; 1.1.8;
actually install the new npf examples
add examples for a hash table file and a tree table file
add an ID string to host-npf.conf