=================================================================== RCS file: /cvsrepo/anoncvs/cvs/src/etc/pf.conf,v retrieving revision 1.31 retrieving revision 1.32 diff -u -r1.31 -r1.32 --- src/etc/pf.conf 2006/01/30 12:20:31 1.31 +++ src/etc/pf.conf 2006/10/07 01:50:22 1.32 @@ -1,4 +1,4 @@ -# $OpenBSD: pf.conf,v 1.31 2006/01/30 12:20:31 camield Exp $ +# $OpenBSD: pf.conf,v 1.32 2006/10/07 01:50:22 mcbride Exp $ # # See pf.conf(5) and /usr/share/pf for syntax and examples. # Remember to set net.inet.ip.forwarding=1 and/or net.inet6.ip6.forwarding=1 @@ -25,11 +25,11 @@ #anchor "ftp-proxy/*" #block in -#pass out keep state +#pass out -#pass quick on $int_if +#pass quick on $int_if no state #antispoof quick for { lo $int_if } -#pass in on $ext_if proto tcp to ($ext_if) port ssh keep state -#pass in log on $ext_if proto tcp to ($ext_if) port smtp keep state -#pass out log on $ext_if proto tcp from ($ext_if) to port smtp keep state +#pass in on $ext_if proto tcp to ($ext_if) port ssh +#pass in log on $ext_if proto tcp to ($ext_if) port smtp +#pass out log on $ext_if proto tcp from ($ext_if) to port smtp