![]() |
|
|||||||
| OpenBSD Security Functionally paranoid! |
|
|
Thread Tools | Display Modes |
|
|||
|
At home I use cisco vpn client to remote into work. Can anyone PLEASE help me enable this type of traffic in PF?
Help is greatly appreciated. http://www.cisco.com/en/US/products/...308/index.html Thanks Code:
EXT="pppoe0"
INT="re1"
INT_NET="{ 192.168.0.0/24 }"
TCP_PORTS = "{ www ssh }"
UDP_PORTS = 'domain'
set block-policy drop
set skip on lo0
nat on $EXT from $INT_NET -> ($EXT:0)
match on pppoe0 scrub (reassemble tcp max-mss 1440)
block log all
pass out on $EXT tagged OK
pass in on $INT inet proto tcp from $INT_NET to any port $TCP_PORTS tag OUT_OK
pass in on $INT inet proto udp from $INT_NET to any port $UDP_PORTS tag OUT_OK
|
| Thread Tools | |
| Display Modes | |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| enabling linux binary emulation .. could it harm ? | daemonfowl | OpenBSD Security | 7 | 30th July 2012 02:20 PM |
| OBSD client hangs mounting NFS; Linux client doesn't | amorphousone | OpenBSD General | 7 | 26th August 2010 05:21 AM |
| Enabling an "All-in-One" Printer/Scanner/Fax on OBSD | IronForge | OpenBSD General | 3 | 17th February 2010 03:22 AM |
| NetBSD for Cisco Pix? | twoblink | NetBSD General | 8 | 3rd May 2009 11:21 PM |
| Cisco IOS commands ?? | jb_daefo | Off-Topic | 7 | 5th June 2008 01:53 AM |