Changeset 13233 in hybrid for branches/releng-10/nanobsd/files

Timestamp:

Apr 6, 2015, 8:07:52 PM (10 years ago)

Author:

huub

Message:

NAT OK ook bij alias op external interface

File:

• branches/releng-10/nanobsd/files/etc/pf.hybrid.conf (modified) (3 diffs)

branches/releng-10/nanobsd/files/etc/pf.hybrid.conf

@@ -18 +18 @@
 
 # Standard port allow listings for external services
-allow_ext_in_tcp="ssh, openvpn"
+allow_ext_in_tcp="1022, openvpn"
 allow_ext_in_udp="snmp, openvpn"
 
@@ -30 +30 @@
 
 # Default configuration for ALIX2 with vr0 as external interface and wlan0 as
-# the public accesspoint in iLeiden setup, no aliases on interfaces.
+# the public accesspoint in iLeiden setup, aliases on external interface OK.
 ext_if="vr0"
 ext_ip="(vr0:0)"
@@ -58 +58 @@
 no nat from $wl_net to $private
 
-# Nat the internet for iLeiden functionality (1)
-nat on $inet_if inet proto tcp from $wl_net to ! $wl_net port { $publicnat } -> ($inet_if)
+# Nat the internet for iLeiden functionality allow for alias on vr0 (1)
+nat on $inet_if inet proto tcp from $wl_net to ! $wl_net port { $publicnat } -> ($inet_ip)