Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 26 Oct 2017 10:15:01 +0200
From:      Chandra Kirchrath <kirchrath@gmail.com>
To:        freebsd-doc@freebsd.org
Subject:   29.3.3.1 PF
Message-ID:  <CAFBdJPC2gqJPSG=ooE3%2BhpeJPkc5Jks0P2kujMvq9Jcs_QQAGA@mail.gmail.com>

next in thread | raw e-mail | index | archive | help
Hi! I am really new to FreeBSD and especially to networking so maybe it's
just me but I think there is a little error in the documentation (chapter
29.3.3.1 - PF).

 - xl1 is the external Interface connected to the internet
 - xl0 is the external local interface

This rule is comprehensible: pass from xl1:network to any port $ports keep
state
(I read it like `pass everything from the internet to the allowed ports`)

The following confuses me:
"For example, a $localnet macro could be defined as the network directly
attached to the internal interface ($xl1:network)"  - I thought $xl1 is the
internet/external interface - why is it called $localnet?

Is this an error in the documentation or did I miss something?

Thank you in advance!
Chandra

BTW: The handbook is really great and easier to understand than the most of
howtos out there.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAFBdJPC2gqJPSG=ooE3%2BhpeJPkc5Jks0P2kujMvq9Jcs_QQAGA>