summaryrefslogtreecommitdiff
path: root/etc/pf.conf
diff options
context:
space:
mode:
authormaddaat <git@maddaat.org>2026-04-13 18:01:58 +0400
committermaddaat <git@maddaat.org>2026-04-13 19:15:19 +0400
commit048968b8e0586eb86ad2c406fe0273670c1c1a43 (patch)
treed422292d266c5ea305c083705a89148f38ddf27e /etc/pf.conf
parenteb670e687edcc065c2886be806acd80a697f9bea (diff)
downloadinfra-048968b8e0586eb86ad2c406fe0273670c1c1a43.tar
infra-048968b8e0586eb86ad2c406fe0273670c1c1a43.tar.gz
infra-048968b8e0586eb86ad2c406fe0273670c1c1a43.tar.bz2
infra-048968b8e0586eb86ad2c406fe0273670c1c1a43.tar.lz
infra-048968b8e0586eb86ad2c406fe0273670c1c1a43.tar.xz
infra-048968b8e0586eb86ad2c406fe0273670c1c1a43.tar.zst
infra-048968b8e0586eb86ad2c406fe0273670c1c1a43.zip
Add some files
Diffstat (limited to 'etc/pf.conf')
-rw-r--r--etc/pf.conf14
1 files changed, 14 insertions, 0 deletions
diff --git a/etc/pf.conf b/etc/pf.conf
new file mode 100644
index 0000000..ecf2183
--- /dev/null
+++ b/etc/pf.conf
@@ -0,0 +1,14 @@
+# $OpenBSD: pf.conf,v 1.55 2017/12/03 20:40:04 sthen Exp $
+#
+# See pf.conf(5) and /etc/examples/pf.conf
+
+set skip on lo
+
+block return # block stateless traffic
+pass # establish keep-state
+
+# By default, do not permit remote connections to X11
+block return in on ! lo0 proto tcp to port 6000:6010
+
+# Port build user does not need network
+block return out log proto {tcp udp} user _pbuild