Building the Network You Need with OpenBSD's PF: BSDCan, Ottawa May 6th, 2009
Prev |  | Next

# Anchors - tag and quick

`quick` with tags

    anchor "dmz" on $dmz_if {
            pass out proto { tcp udp } to $nameservers port domain tag GOOD
    	pass out proto tcp to $webservers port { www https } tag GOOD
    	pass out proto tcp to $mailserver port smtp tag GOOD
    	pass in log (all, to pflog1) in proto tcp from $mailserver
                    to any port smtp tag GOOD
    	block log quick ! tagged GOOD
    	}