Source-Changes-HG archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
[src/trunk]: src/usr.sbin/npf/npfctl Switch back to tabs, it was nicer this way.
details: https://anonhg.NetBSD.org/src/rev/ecfc9768b8b2
branches: trunk
changeset: 433532:ecfc9768b8b2
user: maxv <maxv%NetBSD.org@localhost>
date: Wed Sep 19 15:36:12 2018 +0000
description:
Switch back to tabs, it was nicer this way.
diffstat:
usr.sbin/npf/npfctl/npf.conf.5 | 36 ++++++++++++++++++------------------
1 files changed, 18 insertions(+), 18 deletions(-)
diffs (68 lines):
diff -r 402caaef5b4b -r ecfc9768b8b2 usr.sbin/npf/npfctl/npf.conf.5
--- a/usr.sbin/npf/npfctl/npf.conf.5 Wed Sep 19 15:20:39 2018 +0000
+++ b/usr.sbin/npf/npfctl/npf.conf.5 Wed Sep 19 15:36:12 2018 +0000
@@ -1,4 +1,4 @@
-.\" $NetBSD: npf.conf.5,v 1.75 2018/09/04 15:36:01 maxv Exp $
+.\" $NetBSD: npf.conf.5,v 1.76 2018/09/19 15:36:12 maxv Exp $
.\"
.\" Copyright (c) 2009-2017 The NetBSD Foundation, Inc.
.\" All rights reserved.
@@ -27,7 +27,7 @@
.\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
.\" POSSIBILITY OF SUCH DAMAGE.
.\"
-.Dd September 4, 2018
+.Dd September 19, 2018
.Dt NPF.CONF 5
.Os
.Sh NAME
@@ -529,33 +529,33 @@
map $ext_if dynamic proto tcp 10.1.1.2 port 22 <- $ext_if port 9022
procedure "log" {
- # The logging facility can be used together with npfd(8).
- log: npflog0
+ # The logging facility can be used together with npfd(8).
+ log: npflog0
}
group "external" on $ext_if {
- pass stateful out final all
+ pass stateful out final all
- block in final from <blacklist>
- pass stateful in final family inet4 proto tcp to $ext_if port ssh apply "log"
- pass stateful in final proto tcp to $ext_if port $services_tcp
- pass stateful in final proto udp to $ext_if port $services_udp
- pass stateful in final proto tcp to $ext_if port 49151-65535 # passive FTP
- pass stateful in final proto udp to $ext_if port 33434-33600 # traceroute
+ block in final from <blacklist>
+ pass stateful in final family inet4 proto tcp to $ext_if port ssh apply "log"
+ pass stateful in final proto tcp to $ext_if port $services_tcp
+ pass stateful in final proto udp to $ext_if port $services_udp
+ pass stateful in final proto tcp to $ext_if port 49151-65535 # passive FTP
+ pass stateful in final proto udp to $ext_if port 33434-33600 # traceroute
}
group "internal" on $int_if {
- block in all
- block in final from <limited>
+ block in all
+ block in final from <limited>
- # Ingress filtering as per BCP 38 / RFC 2827.
- pass in final from $localnet
- pass out final all
+ # Ingress filtering as per BCP 38 / RFC 2827.
+ pass in final from $localnet
+ pass out final all
}
group default {
- pass final on lo0 all
- block all
+ pass final on lo0 all
+ block all
}
.Ed
.\" -----
Home |
Main Index |
Thread Index |
Old Index