npftest.conf revision 1.1.2.2
1 1.1.2.2 riz # $NetBSD: npftest.conf,v 1.1.2.2 2012/08/13 17:49:52 riz Exp $ 2 1.1.2.2 riz 3 1.1.2.2 riz $ext_if = "npftest0" 4 1.1.2.2 riz $int_if = "npftest1" 5 1.1.2.2 riz 6 1.1.2.2 riz # 7 1.1.2.2 riz # RFC 5737 8 1.1.2.2 riz # 9 1.1.2.2 riz 10 1.1.2.2 riz $pub_ip1 = 192.0.2.1 11 1.1.2.2 riz $pub_ip2 = 192.0.2.2 12 1.1.2.2 riz 13 1.1.2.2 riz $local_ip1 = 10.1.1.1 14 1.1.2.2 riz $local_ip2 = 10.1.1.2 15 1.1.2.2 riz $local_ip3 = 10.1.1.3 16 1.1.2.2 riz $local_ip4 = 10.1.1.4 17 1.1.2.2 riz 18 1.1.2.2 riz $local_net = { 10.1.1.0/24 } 19 1.1.2.2 riz $ports = { 8000, 9000 } 20 1.1.2.2 riz 21 1.1.2.2 riz map $ext_if dynamic $local_ip2 <-> $pub_ip2 22 1.1.2.2 riz map $ext_if dynamic $local_net -> $pub_ip1 23 1.1.2.2 riz map $ext_if dynamic $local_ip1 port 6000 <- $pub_ip1 port 8000 24 1.1.2.2 riz 25 1.1.2.2 riz group (interface $ext_if) { 26 1.1.2.2 riz pass stateful out final proto tcp flags S/SA all 27 1.1.2.2 riz pass stateful out final from $local_net 28 1.1.2.2 riz pass stateful in final to any port $ports 29 1.1.2.2 riz pass stateful in final proto icmp all 30 1.1.2.2 riz block all 31 1.1.2.2 riz } 32 1.1.2.2 riz 33 1.1.2.2 riz group (interface $int_if) { 34 1.1.2.2 riz pass stateful out final to $local_ip2 35 1.1.2.2 riz pass out final to $local_ip3 36 1.1.2.2 riz block final to $local_ip4 37 1.1.2.2 riz } 38 1.1.2.2 riz 39 1.1.2.2 riz group (default) { 40 1.1.2.2 riz block all 41 1.1.2.2 riz } 42
Indexes created Sun Oct 12 05:10:08 GMT 2025