Attachment 225540 Details for Bug 256410 – The patch for /etc/rc.d/pf and /etc/defaults/rc.conf

[patch] The patch for /etc/rc.d/pf and /etc/defaults/rc.conf

pf_default_rules.patch (text/plain), 1.47 KB, created by Thomas Steen Rasmussen / Tykling on 2021-06-04 09:53:17 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Thomas Steen Rasmussen / Tykling

Created: 2021-06-04 09:53:17 UTC

Size: 1.47 KB

patch

obsolete

>--- /etc/rc.d/pf	2021-06-04 09:31:20.166767000 +0000
>+++ pf	2021-06-04 09:29:32.637578000 +0000
>@@ -29,7 +29,16 @@
> {
> 	check_startmsgs && echo -n 'Enabling pf'
> 	$pf_program -F all > /dev/null 2>&1
>-	$pf_program -f "$pf_rules" $pf_flags
>+	if ! $pf_program -f "$pf_rules" $pf_flags ; then
>+		if checkyesno pf_default_rules_enable; then
>+			warn "Unable to load $pf_rules, and pf_default_rules_enable is set to YES."
>+			warn "Loading pf_default_rules: $pf_default_rules"
>+			echo -e $pf_default_rules | $pf_program -f - $pf_flags
>+		else
>+			warn "Unable to load $pf_rules, and pf_default_rules_enable is NO."
>+			warn "No pf rules are loaded, this means all traffic is permitted."
>+		fi
>+	fi
> 	if ! $pf_program -s info | grep -q "Enabled" ; then
> 		$pf_program -eq
> 	fi
>--- /etc/defaults/rc.conf	2021-06-04 09:31:32.237254000 +0000
>+++ rc.conf	2021-06-04 09:29:40.233150000 +0000
>@@ -219,6 +219,9 @@
> 				# by default)
> pf_program="/sbin/pfctl"	# where the pfctl program lives
> pf_flags=""			# additional flags for pfctl
>+pf_default_rules_enable="NO"	# fallback to $pf_default_rules if loading ruleset fails
>+pf_default_rules="block drop log all"	# block and drop everything if loading pf ruleset fails
>+#pf_default_rules="block drop log all\npass quick on em4"	# block everything except one interface
> pflog_enable="NO"		# Set to YES to enable packet filter logging
> pflog_logfile="/var/log/pflog"	# where pflogd should store the logfile
> pflog_program="/sbin/pflogd"	# where the pflogd program lives

Actions: View | Diff

Attachments on bug 256410: 225540 | 225716 | 225724 | 225728 | 225730 | 225774