Changeset 14068 in hybrid for branches/releng-11/nanobsd/files

Timestamp:

Mar 12, 2018, 11:23:26 PM (7 years ago)

Author:

rick

Message:

Fix confusing unused inet_if variable.

Replacing it with ext_if will cover the cases

File:

• branches/releng-11/nanobsd/files/etc/pf.hybrid.conf (modified) (5 diffs)

branches/releng-11/nanobsd/files/etc/pf.hybrid.conf

@@ -26 +26 @@
 # the public accesspoint in iLeiden setup, aliases on external interface OK.
 ext_if="vr0"
-inet_if="vr0"
+ext_if="vr0"
 captive_portal_interfaces="wlan0"
 publicnat="http,https"
@@ -48 +48 @@
 
 # Nat the internet for iLeiden functionality allow for alias on vr0 (1)
-nat on $inet_if inet proto tcp from $wl_net to ! $wl_net port { $publicnat } -> ($inet_if:0)
+nat on $ext_if inet proto tcp from $wl_net to ! $wl_net port { $publicnat } -> ($ext_if:0)
 
 
@@ -81 +81 @@
 # External interface is permissive (4)
 block on $ext_if inet from any to !$wl_net
-block on $inet_if inet from any to !$wl_net
 
 # Allow internal WL traffic on alias $ext_if interfaces (5)
@@ -92 +91 @@
 
 # Packets going out are the ones to the internet with an certain limit (1)
-pass out on $inet_if inet proto tcp from $wl_net to any port { $publicnat } keep state \
+pass out on $ext_if inet proto tcp from $wl_net to any port { $publicnat } keep state \
  (max-src-conn-rate 100/10, max-src-conn 10)
 
@@ -101 +100 @@
 
 # For proper functioning allow the local machine to initiate requests outside + vpn (4)
-pass out on $inet_if inet proto udp from $inet_if to any port { $allow_ext_out_udp } keep state
-pass out on $inet_if inet proto tcp from $inet_if to any port { $allow_ext_out_tcp } keep state
-pass out on $inet_if inet proto icmp from $inet_if to any icmp-type { echoreq, trace }
+pass out on $ext_if inet proto udp from $ext_if to any port { $allow_ext_out_udp } keep state
+pass out on $ext_if inet proto tcp from $ext_if to any port { $allow_ext_out_tcp } keep state
+pass out on $ext_if inet proto icmp from $ext_if to any icmp-type { echoreq, trace }
 
 # Uncomment to UDP traceroute from this host to start
 #pass out on $ext_if inet proto udp from $ext_if to any port 33434 >< 33464 keep state
-#pass out on $inet_if inet proto udp from $inet_if to any port 33434 >< 33464 keep state
 
 # Do not allow connections to the local MGNT LAN to start (3)