diff options
| author |   deraadt <deraadt@openbsd.org> | 2007-10-15 20:58:10 +0000 |
|---|---|---|
| committer | deraadt <deraadt@openbsd.org> | 2007-10-15 20:58:10 +0000 |
| commit | befcbaa202ccb11d86b1e330d1fac917ceff159b (patch) | |
| tree | a1f8d011f2d93608417912b7b5a4b18540916e50 | |
| parent | No need to match on "at34c02" anymore. (diff) | |
| download | wireguard-openbsd-befcbaa202ccb11d86b1e330d1fac917ceff159b.tar.xz wireguard-openbsd-befcbaa202ccb11d86b1e330d1fac917ceff159b.zip | |
permit tcp 111/2049 at boot too, for tcp nfs mounts; Jim Rees
| -rw-r--r-- | etc/rc | 6 |
1 files changed, 3 insertions, 3 deletions
@@ -1,4 +1,4 @@ -# $OpenBSD: rc,v 1.305 2007/10/08 11:29:58 norby Exp $ +# $OpenBSD: rc,v 1.306 2007/10/15 20:58:10 deraadt Exp $ # System startup script run by init on autoboot # or after single-user. @@ -226,8 +226,8 @@ if [ X"${pf}" != X"NO" ]; then *[1-9]*) # don't kill NFS RULES="scrub in all no-df\n$RULES" - RULES="$RULES\npass in proto udp from any port { 111, 2049 } to any" - RULES="$RULES\npass out proto udp from any to any port { 111, 2049 }" + RULES="$RULES\npass in proto { tcp, udp } from any port { 111, 2049 } to any" + RULES="$RULES\npass out proto { tcp, udp } from any to any port { 111, 2049 }" ;; esac echo $RULES | pfctl -f - |