diff options
| author |   kstailey <kstailey@openbsd.org> | 1997-02-26 04:36:34 +0000 |
|---|---|---|
| committer | kstailey <kstailey@openbsd.org> | 1997-02-26 04:36:34 +0000 |
| commit | 8f9e1fe2b019dbbc9948c0169cdc81dff27f556d (patch) | |
| tree | aa06ed327c579151b454b94254451d50fd4eecdb | |
| parent | version 1.3.8 (diff) | |
| download | wireguard-openbsd-8f9e1fe2b019dbbc9948c0169cdc81dff27f556d.tar.xz wireguard-openbsd-8f9e1fe2b019dbbc9948c0169cdc81dff27f556d.zip | |
more examples
| -rw-r--r-- | etc/ipf.rules | 8 | ||||
| -rw-r--r-- | share/ipf/nat.1 | 4 |
2 files changed, 11 insertions, 1 deletions
diff --git a/etc/ipf.rules b/etc/ipf.rules index f74c3fc2b59..cfc081af081 100644 --- a/etc/ipf.rules +++ b/etc/ipf.rules @@ -1,4 +1,4 @@ -# $OpenBSD: ipf.rules,v 1.2 1996/05/26 10:25:24 deraadt Exp $ +# $OpenBSD: ipf.rules,v 1.3 1997/02/26 04:36:34 kstailey Exp $ # # IP filtering rules. See the ipf(5) man page for more # information on the format of this file, and /usr/share/ipf @@ -8,3 +8,9 @@ # pass in from any to any pass out from any to any +# +# Prevent web server access, except to localhost which is using ip 10.1.1.3: +# +# block return-rst in proto tcp from any to any port = 80 +# pass in proto tcp from 127.0.0.0/8 to 127.0.0.0/8 port = 80 +# pass in proto tcp from 10.1.1.3 to 10.1.1.3 port = 80 diff --git a/share/ipf/nat.1 b/share/ipf/nat.1 index 9c26754a57f..132583e5246 100644 --- a/share/ipf/nat.1 +++ b/share/ipf/nat.1 @@ -1,3 +1,7 @@ +# map all tcp connections from network 10 to the address of the first ppp0 +# interface +map ppp0 10.0.0.0/8 -> ppp0/32 portmap tcp/udp 10000:20000 + # map all tcp connections from 10.1.0.0/16 to 240.1.0.1, changing the source # port number to something between 10,000 and 20,000 inclusive. For all other # IP packets, allocate an IP # between 240.1.0.0 and 240.1.0.255, temporarily |