Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 25 Sep 2007 12:20:51 -0300
From:      "Gilberto Villani Brito" <linux@giboia.org>
To:        "Reinhard Haller" <reinhard.haller@interactive-net.de>
Cc:        freebsd-pf@freebsd.org
Subject:   Re: filtering local traffic on nat gateway
Message-ID:  <6e6841490709250820i628855cbn54461cc9671d7f9b@mail.gmail.com>
In-Reply-To: <46F819D2.5060904@interactive-net.de>
References:  <46F819D2.5060904@interactive-net.de>

next in thread | previous in thread | raw e-mail | index | archive | help
On 24/09/2007, Reinhard Haller <reinhard.haller@interactive-net.de> wrote:
> Hi,
>
> I want to restrict the locally generated outgoing traffic from the nat
> gateway (cvsup, ddclient i.e. http + https, portupgrade i.e. ftp + http)
> to the internet.
>
> How to distinguish forwarded traffic on tun0 from the local traffic
> after natting?
>
> Thanks
> Reinhard
>
> _______________________________________________
> freebsd-pf@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-pf
> To unsubscribe, send any mail to "freebsd-pf-unsubscribe@freebsd.org"
>
Try this:
block on $ext_if all
pass in on $int_if from <network> to any

-- 
Gilberto Villani Brito
System Administrator
Londrina - PR
Brazil
gilbertovb(a)gmail.com



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?6e6841490709250820i628855cbn54461cc9671d7f9b>