Changeset 13724 in hybrid for branches

Timestamp:

Jan 18, 2017, 1:01:31 AM (8 years ago)

Author:

rick

Message:

ruleset does not allow empty port definitions.

File:

• branches/releng-11/nanobsd/files/etc/pf.hybrid.conf (modified) (2 diffs)

branches/releng-11/nanobsd/files/etc/pf.hybrid.conf

@@ -18 +18 @@
 # Standard port allow listings for external services
 allow_ext_in_tcp="1022"
-allow_ext_in_udp=""
 
 allow_ext_out_tcp = "domain, http, https"
@@ -87 +86 @@
 # Expose some local services for the external world (WWW) network (4)
 pass in on $ext_if inet proto tcp from any to $ext_if port { $allow_ext_in_tcp } keep state
-pass in on $ext_if inet proto udp from any to $ext_if port { $allow_ext_in_udp } keep state
 pass in on $ext_if inet proto icmp from any to $ext_if icmp-type { echoreq }