Module Name: src
Committed By: sevan
Date: Thu Apr 11 09:59:24 UTC 2019
Modified Files:
src/share/examples/npf: soho_gw-npf.conf
Log Message:
Revert previous & just use the inets function to handle both address families.
Heads up by <leot>
To generate a diff of this commit:
cvs rdiff -u -r1.10 -r1.11 src/share/examples/npf/soho_gw-npf.conf
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.
Modified files:
Index: src/share/examples/npf/soho_gw-npf.conf
diff -u src/share/examples/npf/soho_gw-npf.conf:1.10 src/share/examples/npf/soho_gw-npf.conf:1.11
--- src/share/examples/npf/soho_gw-npf.conf:1.10 Wed Apr 10 23:14:46 2019
+++ src/share/examples/npf/soho_gw-npf.conf Thu Apr 11 09:59:24 2019
@@ -1,4 +1,4 @@
-# $NetBSD: soho_gw-npf.conf,v 1.10 2019/04/10 23:14:46 sevan Exp $
+# $NetBSD: soho_gw-npf.conf,v 1.11 2019/04/11 09:59:24 sevan Exp $
#
# SOHO border
#
@@ -8,8 +8,7 @@
$ext_if = "wm0"
$ext_v4 = inet4(wm0)
-$ext_addrs = inet4(wm0)
-$ext_addrs6 = inet6(wm0)
+$ext_addrs = inets(wm0)
$int_if = "wm1"
@@ -43,15 +42,11 @@ group "external" on $ext_if {
apply "log"
pass stateful in final proto tcp to $ext_addrs port $services_tcp
pass stateful in final proto udp to $ext_addrs port $services_udp
- pass stateful in final family inet6 proto tcp to $ext_addrs6 port $services_tcp
- pass stateful in final family inet6 proto udp to $ext_addrs6 port $services_udp
# Passive FTP
pass stateful in final proto tcp to $ext_addrs port 49151-65535
- pass stateful in final family inet6 proto tcp to $ext_addrs6 port 49151-65535
# Traceroute
pass stateful in final proto udp to $ext_addrs port 33434-33600
- pass stateful in final family inet6 proto udp to $ext_addrs6 port 33434-33600
}
group "internal" on $int_if {
