Changes between Version 30 and Version 31 of FreeBSDOnEmbeddedDevice

Timestamp:

Feb 2, 2012, 12:12:57 PM (13 years ago)

Author:

Rick van der Zwet

Comment:

--

FreeBSDOnEmbeddedDevice

@@ -154 +154 @@
 }}}
 
+{{{
+#chroot <<'EOF' > /etc/pf.conf 
+inet_if="vr1"
+wleiden_if="vr2"
+int_if="bridge0"
+int_network="192.168.42.0/24"
+
+
+# Do not do anything @ localhost
+set skip on lo0
+
+### all incoming traffic on external interface is normalized and fragmented
+### packets are reassembled.
+scrub in all fragment reassemble
+
+nat on $inet_if from $int_network  -> ($inet_if:0)
+nat on $wleiden_if from $int_network  -> ($wleiden_if:0)
+
+# SSH Access for proxy13
+rdr pass on $inet_if proto tcp from any to any port 2022 \
+        -> 192.168.42.146 port ssh
+
+# SSH Access for CNodeRick
+nat on $wleiden_if from any to 172.20.145.129 port ssh -> ($wleiden_if:0)
+rdr pass on $inet_if proto tcp from any to any port 1022 \
+        -> 172.20.145.129 port ssh
+
+# No firewall configured
+pass quick on $int_if no state
+
+pass out on $inet_if keep state
+pass out on $wleiden_if keep state
+
+pass in on $inet_if keep state
+pass in on $wleiden_if keep state
+}}}
 == Package install ==