Configure pf Firewall: Difference between revisions
Jump to navigation
Jump to search
imported>Jacob No edit summary |
imported>Jacob mNo edit summary |
||
| Line 3: | Line 3: | ||
So the general layout is | So the general layout is | ||
# Macro definitions | |||
# Stateful Tracking Options (STO) | # Stateful Tracking Options (STO) | ||
# TABLES | # TABLES | ||
| Line 12: | Line 11: | ||
# TRANSLATION | # TRANSLATION | ||
# PACKET FILTERING | # PACKET FILTERING | ||
#====================================================== | #====================================================== | ||
# ext-if | # ext-if | ||
Revision as of 07:49, 4 June 2019
The philosophy we will use for the fire wall is that we split in 2 or 4 paths depending on the traffic initiated outside or inside. We als split the config in tcp and udp traffic for efficiency reasons see: NOTE link needed here to article or book. So the general layout is
# Macro definitions # Stateful Tracking Options (STO) # TABLES # OPTIONS # TRAFFIC NORMALISATION # QUEUEING # TRANSLATION # PACKET FILTERING #====================================================== # ext-if #======================================== # ext-if IN #=========================== # ext-if IN TCP #=========================== # ext-if IN UDP #=========================== # ext-if IN IMCP #======================================== # ext-if OUT #=========================== # ext-if OUT TCP #=========================== # ext-if OUT UDP #=========================== # ext-if OUT IMCP