diff options
| author | bookcorner <git@bookcorner.ge> | 2026-07-26 02:25:33 +0400 |
|---|---|---|
| committer | bookcorner <git@bookcorner.org> | 2026-07-26 02:26:08 +0400 |
| commit | 3ccf0e454f535d4c1b5787727e9e1d06be471e85 (patch) | |
| tree | 7eb609021e5f3d91b30465c0e6aa3071cf0f97a4 /etc/pf.conf | |
| download | infra-3ccf0e454f535d4c1b5787727e9e1d06be471e85.tar infra-3ccf0e454f535d4c1b5787727e9e1d06be471e85.tar.gz infra-3ccf0e454f535d4c1b5787727e9e1d06be471e85.tar.bz2 infra-3ccf0e454f535d4c1b5787727e9e1d06be471e85.tar.lz infra-3ccf0e454f535d4c1b5787727e9e1d06be471e85.tar.xz infra-3ccf0e454f535d4c1b5787727e9e1d06be471e85.tar.zst infra-3ccf0e454f535d4c1b5787727e9e1d06be471e85.zip | |
Initial commit
Diffstat (limited to 'etc/pf.conf')
| -rw-r--r-- | etc/pf.conf | 14 |
1 files changed, 14 insertions, 0 deletions
diff --git a/etc/pf.conf b/etc/pf.conf new file mode 100644 index 0000000..ecf2183 --- /dev/null +++ b/etc/pf.conf @@ -0,0 +1,14 @@ +# $OpenBSD: pf.conf,v 1.55 2017/12/03 20:40:04 sthen Exp $ +# +# See pf.conf(5) and /etc/examples/pf.conf + +set skip on lo + +block return # block stateless traffic +pass # establish keep-state + +# By default, do not permit remote connections to X11 +block return in on ! lo0 proto tcp to port 6000:6010 + +# Port build user does not need network +block return out log proto {tcp udp} user _pbuild |