RES: Rule doubt

David Verzolla dverzolla at fcl.com.br
Thu Sep 27 11:31:59 PDT 2007


Hi Michael,


When I do this, the PF changes de interface to IP.

Exemple:
ext_if="bge0"

IN pf.conf:
pass in quick on $vlan10 inet from any to $ext_if

With pfctl -sr:
pass in quick on vlan10 inet from any to 200.x.x.x

Regards,
David

-----Mensagem original-----
De: Michael K. Smith - Adhost [mailto:mksmith at adhost.com] 
Enviada em: quinta-feira, 27 de setembro de 2007 13:59
Para: David Verzolla; freebsd-pf at freebsd.org
Assunto: RE: Rule doubt

Hello David:

> -----Original Message-----
> From: owner-freebsd-pf at freebsd.org [mailto:owner-freebsd-
> pf at freebsd.org] On Behalf Of David Verzolla
> Sent: Thursday, September 27, 2007 9:25 AM
> To: freebsd-pf at freebsd.org
> Subject: Rule doubt
> 
> Hi All,
> Its possible creates a rule that can match all the traffic designated
> to an specific interface?
> 
> Example:
> 
> pass in on $vlan10 from <vlan10> to (the interface, not the address)
> $ext_if
> 
> The $ext_if:network doesn't works for me.
> 
Did you try specifying the interface name instead?  As an example:




ext_if="em1"

or bge0 or whatever.

Regards,

Mike



More information about the freebsd-pf mailing list