Solved Handbook (Chapter 30. Firewalls)

M

masayoshi

Is x.x.x the same as xxx?

# Allow outbound access to public DNS servers.
# Replace x.x.x. with address listed in /etc/resolv.conf.
# Repeat for each DNS server.
pass out quick on dc0 proto tcp from any to x.x.x. port = 53 flags S keep state
pass out quick on dc0 proto udp from any to xxx port = 53 keep state
Click to expand...

30.5.3. Example Ruleset


Instead of www, I should write http in pf.conf?

PF understands port names as well as port numbers, as long as the names are listed in /etc/services.
Click to expand...
Code: 
tcp_services = "{ ssh, smtp, domain, www, pop3, auth, pop3s }"
udp_services = "{ domain }"

Code: 
root@FreeBSD:~ # less /etc/services | grep www
#       http://www.iana.org/assignments/port-numbers
http             80/sctp   www www-http #World Wide Web HTTP
http             80/tcp    www www-http #World Wide Web HTTP
http             80/udp    www www-http #World Wide Web HTTP

30.3.2. PF Rulesets
 
Alain De Vos said:
www is port 80, http has no meaning ?
Click to expand...
Code: 
# getent services http
http                 80/sctp  www www-http
# getent services www-http
http                 80/sctp  www www-http
# getent services www
http                 80/sctp  www www-http
# getent services doesnotexist
#
 
You must log in or register to reply here.
Back
Top