PF, The OpenBSD Packet Filter: Building The Network You Need: BSDCan, Ottawa, June 10th 2015 | ||
---|---|---|
Prev | Next |
Let users authenticate
pass quick on $int_if inet proto { tcp, udp } to $int_if port ssh
Other rules could just as easily go in authpf.rules
pass quick inet proto { tcp, udp } from <authpf_users> to \ any port $udp_services pass inet proto tcp from <authpf_users> to any port $client_out