forum.lissyara.su

Код: Выделить всё

ext_if = "re0"
int_if = "re1"
tcp_services = "{ 22 }"

set skip on lo0
scrub in all

table <pf-allow-pc> file "/etc/pf-allow-pc"
nat on $ext_if from <pf-allow-pc> to any -> ($ext_if)

block all
pass in on $int_if from any to any
pass out on $ext_if from $ext_if to any
pass in on $ext_if proto tcp from any to $ext_if port $tcp_services
pass in inet proto icmp all icmp-type echoreq