xref: /dragonfly/etc/pf.conf (revision 31524921) 
1#	$OpenBSD: pf.conf,v 1.25 2004/01/29 18:54:29 todd Exp $
2#	$DragonFly: src/etc/pf.conf,v 1.2 2005/12/13 08:38:55 swildner Exp $
3#
4# See pf.conf(5) and /usr/share/examples/pf for syntax and examples.
5
6#ext_if="ext0"
7#int_if="int0"
8
9#table <spamd> persist
10#table <spamd-white> persist
11
12#scrub in
13
14#nat on $ext_if from !($ext_if) -> ($ext_if:0)
15#rdr pass on $int_if proto tcp to port ftp -> 127.0.0.1 port 8021
16#rdr pass on $ext_if proto tcp from <spamd> to port smtp \
17#	-> 127.0.0.1 port spamd
18#rdr pass on $ext_if proto tcp from !<spamd-white> to port smtp \
19#	-> 127.0.0.1 port spamd
20
21#block in
22#pass out keep state
23
24#pass quick on { lo $int_if }
25#antispoof quick for { lo $int_if }
26
27#pass on $ext_if proto { icmp }
28
29#pass in on $ext_if proto tcp to ($ext_if) port ssh keep state
30#pass in on $ext_if proto tcp to ($ext_if) port > 49151 user proxy keep state
31#pass in log on $ext_if proto tcp to ($ext_if) port smtp keep state
32#pass out log on $ext_if proto tcp from ($ext_if) to port smtp keep state
33