===================================================================
RCS file: /cvsrepo/anoncvs/cvs/src/etc/pf.conf,v
retrieving revision 1.9
retrieving revision 1.10
diff -c -r1.9 -r1.10
*** src/etc/pf.conf	2002/12/13 10:20:25	1.9
--- src/etc/pf.conf	2002/12/19 00:06:29	1.10
***************
*** 1,4 ****
! #	$OpenBSD: pf.conf,v 1.9 2002/12/13 10:20:25 henning Exp $
  #
  # See pf.conf(5) for syntax and examples
  # General order: options, scrub rules, NAT/rdr, and filter rules.
--- 1,4 ----
! #	$OpenBSD: pf.conf,v 1.10 2002/12/19 00:06:29 deraadt Exp $
  #
  # See pf.conf(5) for syntax and examples
  # General order: options, scrub rules, NAT/rdr, and filter rules.
***************
*** 9,37 ****
  external_addr="192.168.1.1"
  
  # Normalize: reassemble fragments and resolve or reduce traffic ambiguities
! # scrub in all
  
  # nat: packets going out through $ext_if with source address $internal_net will get
  # translated as coming from $external_addr, a state is created for such packets,
  # and incoming packets will be redirected to the internal address.
  
- # nat on $ext_if from $internal_net to any -> $external_addr
- 
  # rdr: packets coming in on $ext_if with destination $external_addr:1234 will
  # be redirected to 10.1.1.1:5678. A state is created for such packets, and
  # outgoing packets will be translated as coming from the external address.
  
- # rdr on $ext_if proto tcp from any to $external_addr/32 port 1234 -> 10.1.1.1 port 5678
- 
  # filter rules
  # the implicit first two rules are
! # pass in all
! # pass out all
  
  # block all incoming packets but allow ssh, pass all outgoing tcp and udp
! # connections and keep state
! # log blocked packets
  
! # block in log all
! # pass  in  on $ext_if proto tcp from any to $ext_if port 22 keep state
! # pass  out on $ext_if proto { tcp, udp } all keep state
--- 9,36 ----
  external_addr="192.168.1.1"
  
  # Normalize: reassemble fragments and resolve or reduce traffic ambiguities
! #scrub in all
  
  # nat: packets going out through $ext_if with source address $internal_net will get
  # translated as coming from $external_addr, a state is created for such packets,
  # and incoming packets will be redirected to the internal address.
+ #nat on $ext_if from $internal_net to any -> $external_addr
  
  # rdr: packets coming in on $ext_if with destination $external_addr:1234 will
  # be redirected to 10.1.1.1:5678. A state is created for such packets, and
  # outgoing packets will be translated as coming from the external address.
+ #rdr on $ext_if proto tcp from any to $external_addr/32 port 1234 -> 10.1.1.1 port 5678
  
  # filter rules
  # the implicit first two rules are
! #pass in all
! #pass out all
  
  # block all incoming packets but allow ssh, pass all outgoing tcp and udp
! # connections and keep state, logging blocked packets
! #block in log all
! #pass  in  on $ext_if proto tcp from any to $ext_if port 22 keep state
! #pass  out on $ext_if proto { tcp, udp } all keep state
  
! # anchor to attach spews rules, which will redirect to spewsd(8)
! #rdr-anchor spews inet proto tcp from any to any port = smtp