diff options
| author | Jan Tuomi <jan@jantuomi.fi> | 2025-11-30 11:50:29 +0200 |
|---|---|---|
| committer | Jan Tuomi <jan@jantuomi.fi> | 2025-11-30 11:50:29 +0200 |
| commit | 5c1f0e17b8b0e9ebba6078854c1224e7f5d93ac2 (patch) | |
| tree | 00412c3090e0fb48cccc074d02f0afffee9bbcc5 /templates/etc_pf.conf.j2 | |
| parent | 28379e016d4ab80a0d0529d6ca08083c75a0be4d (diff) | |
pf changes
Diffstat (limited to 'templates/etc_pf.conf.j2')
| -rw-r--r-- | templates/etc_pf.conf.j2 | 27 |
1 files changed, 0 insertions, 27 deletions
diff --git a/templates/etc_pf.conf.j2 b/templates/etc_pf.conf.j2 deleted file mode 100644 index 87ae43a..0000000 --- a/templates/etc_pf.conf.j2 +++ /dev/null @@ -1,27 +0,0 @@ -lan_if = "lan0" -wan_if = "brwan0" - -# Default policy -set skip on lo -# Allow all traffic on $wan_if. Proper firewall rules are implemented in the ingress jail. -set skip on $wan_if -set block-policy return -scrub in - -# Default block all -block in all - -# Allow all outbound traffic -pass out all keep state - -# Allow inbound HTTP/HTTPS on lan0 -pass in on $lan_if proto tcp from any to ($lan_if) port { 80, 443 } keep state - -# Allow SSH only on lan0 -pass in on $lan_if proto tcp from any to ($lan_if) port 22 keep state - -# Allow all ICMPv6 (required for IPv6 to function correctly) -pass inet6 proto ipv6-icmp from any to any keep state - -# Allow all ICMPv4 -pass inet proto icmp from any to any keep state |