Home | History | Annotate | Line # | Download | only in etc
pf.conf revision 1.1 
      1 #	$OpenBSD: pf.conf,v 1.28 2004/04/29 21:03:09 frantzen Exp $
      2 #
      3 # See pf.conf(5) and /usr/share/pf for syntax and examples.
      4 # Remember to set net.inet.ip.forwarding=1 and/or net.inet6.ip6.forwarding=1
      5 # in /etc/sysctl.conf if packets are to be forwarded between interfaces.
      6 
      7 #ext_if="ext0"
      8 #int_if="int0"
      9 
     10 #table <spamd> persist
     11 #table <spamd-white> persist
     12 
     13 #scrub in
     14 
     15 #nat on $ext_if from !($ext_if) -> ($ext_if:0)
     16 #rdr pass on $int_if proto tcp to port ftp -> 127.0.0.1 port 8021
     17 #rdr pass on $ext_if proto tcp from <spamd> to port smtp \
     18 #	-> 127.0.0.1 port spamd
     19 #rdr pass on $ext_if proto tcp from !<spamd-white> to port smtp \
     20 #	-> 127.0.0.1 port spamd
     21 
     22 #block in
     23 #pass out keep state
     24 
     25 #pass quick on { lo $int_if }
     26 #antispoof quick for { lo $int_if }
     27 
     28 #pass in on $ext_if proto tcp to ($ext_if) port ssh keep state
     29 #pass in on $ext_if proto tcp to ($ext_if) port > 49151 user proxy keep state
     30 #pass in log on $ext_if proto tcp to ($ext_if) port smtp keep state
     31 #pass out log on $ext_if proto tcp from ($ext_if) to port smtp keep state
     32