npftest.conf revision 1.1.4.2
1 1.1.4.2 tls # $NetBSD: npftest.conf,v 1.1.4.2 2014/08/20 00:05:11 tls Exp $ 2 1.1 rmind 3 1.1 rmind $ext_if = "npftest0" 4 1.1 rmind $int_if = "npftest1" 5 1.1 rmind 6 1.1 rmind # 7 1.1 rmind # RFC 5737 8 1.1 rmind # 9 1.1 rmind 10 1.1 rmind $pub_ip1 = 192.0.2.1 11 1.1 rmind $pub_ip2 = 192.0.2.2 12 1.1.4.2 tls $pub_ip3 = 192.0.2.3 13 1.1 rmind 14 1.1 rmind $local_ip1 = 10.1.1.1 15 1.1 rmind $local_ip2 = 10.1.1.2 16 1.1 rmind $local_ip3 = 10.1.1.3 17 1.1 rmind $local_ip4 = 10.1.1.4 18 1.1 rmind 19 1.1 rmind $local_net = { 10.1.1.0/24 } 20 1.1 rmind $ports = { 8000, 9000 } 21 1.1 rmind 22 1.1.4.2 tls $net6_inner = fd01:203:405::/48 23 1.1.4.2 tls $net6_outer = 2001:db8:1::/48 24 1.1.4.2 tls 25 1.1.4.2 tls map $ext_if static $local_ip3 <-> $pub_ip3 26 1.1 rmind map $ext_if dynamic $local_ip2 <-> $pub_ip2 27 1.1 rmind map $ext_if dynamic $local_net -> $pub_ip1 28 1.1 rmind map $ext_if dynamic $local_ip1 port 6000 <- $pub_ip1 port 8000 29 1.1 rmind 30 1.1.4.2 tls map $ext_if static algo npt66 $net6_inner <-> $net6_outer 31 1.1.4.2 tls 32 1.1.4.2 tls group "ext" on $ext_if { 33 1.1.4.2 tls pass out final from $local_ip3 34 1.1.4.2 tls pass in final to $pub_ip3 35 1.1.4.2 tls 36 1.1.4.2 tls pass out final from $net6_inner 37 1.1.4.2 tls pass in final to $net6_outer 38 1.1.4.2 tls 39 1.1 rmind pass stateful out final proto tcp flags S/SA all 40 1.1 rmind pass stateful out final from $local_net 41 1.1 rmind pass stateful in final to any port $ports 42 1.1 rmind pass stateful in final proto icmp all 43 1.1 rmind block all 44 1.1 rmind } 45 1.1 rmind 46 1.1.4.2 tls group "int" on $int_if { 47 1.1.4.2 tls ruleset "test-rules" 48 1.1 rmind pass stateful out final to $local_ip2 49 1.1 rmind pass out final to $local_ip3 50 1.1 rmind block final to $local_ip4 51 1.1 rmind } 52 1.1 rmind 53 1.1.4.2 tls group default { 54 1.1 rmind block all 55 1.1 rmind } 56
Indexes created Tue Oct 14 21:09:58 GMT 2025