https://wiki.sjakio.com:443/index.php?action=history&feed=atom&title=Setup_pf.conf_file 2026-04-13T16:54:08Z Revision history for this page on the wiki MediaWiki 1.41.0 https://wiki.sjakio.com:443/index.php?title=Setup_pf.conf_file&diff=328&oldid=prev 2019-06-05T13:50:08Z

<p><span dir="auto"><span class="autocomment">PACKET FILTERING</span></span></p> <table style="background-color: #fff; color: #202122;" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="en"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 08:50, 5 June 2019</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l16">Line 16:</td> <td colspan="2" class="diff-lineno">Line 16:</td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>In the translation section we define the redirect rules for incoming traffic. Like send http and https to the webserver and smtp traffic to the mailserver.</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>In the translation section we define the redirect rules for incoming traffic. Like send http and https to the webserver and smtp traffic to the mailserver.</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>==== PACKET FILTERING ====</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>==== PACKET FILTERING ====</div></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div> </div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">The packet filtering section are split several ways for efficiency reasons. First they split in WAN NIC and LAN NIC traffic. Each of these sections is then split into NIC IN and OUT out traffic. The IN and OUT sections are then split for TCP and UDP traffic.&lt;br&gt;</ins></div></td></tr> <tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">&lt;br&gt;</ins></div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  #======================================================</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  #======================================================</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  # ext-if</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  # ext-if</div></td></tr> <!-- diff cache key wiki:diff:1.41:old-327:rev-328:php=table --> </table>

imported>Jacob https://wiki.sjakio.com:443/index.php?title=Setup_pf.conf_file&diff=327&oldid=prev 2019-06-05T13:40:07Z

<p>Created page with &quot;So the general layout of the pf file is ==== Macro Definitions ==== In the macro definitions we declare the: interfaces, hosts, ports etc.&lt;br&gt; To be able to change port numbe...&quot;</p> <p><b>New page</b></p><div>So the general layout of the pf file is <br /> ==== Macro Definitions ====<br /> In the macro definitions we declare the: interfaces, hosts, ports etc.&lt;br&gt;<br /> To be able to change port numbers or IP-addresses without the need to go through the complete configuration file.<br /> ==== Stateful Tracking Options (STO) ====<br /> <br /> ==== TABLES ====<br /> Here we define Tables used for spamd and ftp proxy functionality<br /> ==== OPTIONS ====<br /> <br /> ==== TRAFFIC NORMALISATION ====<br /> <br /> ==== QUEUEING ====<br /> <br /> ==== TRANSLATION ====<br /> In the translation section we define the redirect rules for incoming traffic. Like send http and https to the webserver and smtp traffic to the mailserver.<br /> ==== PACKET FILTERING ====<br /> <br /> #======================================================<br /> # ext-if<br /> #========================================<br /> # ext-if IN<br /> #===========================<br /> # ext-if IN TCP<br /> #===========================<br /> # ext-if IN UDP<br /> #===========================<br /> # ext-if IN IMCP<br /> #========================================<br /> # ext-if OUT<br /> #===========================<br /> # ext-if OUT TCP<br /> #===========================<br /> # ext-if OUT UDP<br /> #===========================<br /> # ext-if OUT IMCP<br /> #======================================================<br /> # int-if<br /> #========================================<br /> # int-if IN<br /> #===========================<br /> # int-if IN TCP<br /> #===========================<br /> # int-if IN UDP<br /> #===========================<br /> # int-if IN ICMP<br /> #========================================<br /> # int-if OUT<br /> #===========================<br /> # int-if OUT TCP<br /> #===========================<br /> # int-if OUT UDP<br /> #===========================<br /> # int-if OUT ICMP</div>

imported>Jacob