Changeset 10842 in hybrid for branches/releng-9.0/nanobsd

Timestamp:

May 13, 2012, 10:33:20 PM (13 years ago)

Author:

rick

Message:

172.16.0.0/12 is alleen WL net en kan nooit gebruikt worden als (coperate) DMZ
voor de external interface, omdat dit allemaal raar gedrag met zich meebrengt.

fixes nodefactory:ticket:175

File:

• branches/releng-9.0/nanobsd/files/etc/pf.hybrid.conf (modified) (2 diffs)

branches/releng-9.0/nanobsd/files/etc/pf.hybrid.conf

@@ -36 +36 @@
 # Global standards. NOT to be edited.
 wl_net="172.16.0.0/12"
-private="{ 10.0.0.0/8, 172.16.0.0/12 192.168.0.0/16 }"
+private="{ 10.0.0.0/8, 192.168.0.0/16 }"
 ileiden_ports="http,https"
 
@@ -83 +83 @@
 block on $ext_if
 
+# Allow internal WL traffic on alias $ext_if interfaces (5)
+pass in quick on $ext_if from $wl_net to $wl_net
+pass out quick on $ext_if from $wl_net to $wl_net
+
 # Expose some local services (4)
 pass in on $ext_if inet proto tcp from any to $ext_if port { $allow_ext_in_tcp } keep state