Building the Network You Need with OpenBSD's PF: BSDCan, Ottawa May 6th, 2009
Prev |  | Next

# Open but shut: pf.conf

`/etc/pf.conf`

    ext_if = "re0"
    int_if = "ath0"
    auth_web="192.168.27.20"
    dhcp_services = "{ bootps, bootpc }" # DHCP server + client
    table <authpf_users> persist
    rdr pass on $int_if proto tcp from ! <authpf_users> to any \
        port http -> $auth_web
    nat on $ext_if from $localnet to any -> ($ext_if)
    nat-anchor "authpf/*"
    rdr-anchor "authpf/*"
    binat-anchor "authpf/*"
    anchor "authpf/*"
    pass quick on $int_if inet proto { tcp, udp } to $int_if \
         port dhcp_services
    pass quick inet proto { tcp, udp } from $int_if:network to \
         any port domain
    pass quick on $int_if inet proto { tcp, udp } to $int_if port ssh