diff options
| author | Jan Tuomi <jan@jantuomi.fi> | 2025-07-25 00:09:01 +0300 |
|---|---|---|
| committer | Jan Tuomi <jan@jantuomi.fi> | 2025-09-26 16:14:53 +0200 |
| commit | cc1b02f99e457d2a5a440698e9bae1ca30f408e1 (patch) | |
| tree | d26b3086697996b27f9e459cadcf195adc60eebb /templates/etc_pf.conf.j2 | |
| parent | d1c9aa40ccb5910076d0ec94843efccf62ee006a (diff) | |
Initial impl of vnet jails
Diffstat (limited to 'templates/etc_pf.conf.j2')
| -rw-r--r-- | templates/etc_pf.conf.j2 | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/templates/etc_pf.conf.j2 b/templates/etc_pf.conf.j2 index 0b5a756..0bb7fef 100644 --- a/templates/etc_pf.conf.j2 +++ b/templates/etc_pf.conf.j2 @@ -1,10 +1,20 @@ lan_if = "lan0" wan_if = "wan0" +jail_ingress_ip = "{{ jail_ingress_ip }}" # Default policy set skip on lo set block-policy return scrub in + +# Redirect HTTP to ingress jail +# TODO: fix these redirects, they seem to not work +rdr on $wan_if proto tcp from any to ($wan_if) port 80 -> $jail_ingress_ip port 80 +rdr on $wan_if proto tcp from any to ($wan_if) port 443 -> $jail_ingress_ip port 443 +rdr on $lan_if proto tcp from any to ($lan_if) port 80 -> $jail_ingress_ip port 80 +rdr on $lan_if proto tcp from any to ($lan_if) port 443 -> $jail_ingress_ip port 443 + +# Default block all block in all # Allow all outbound traffic |