pf starts, but no rules

[Kian Mohageri]

On 2/13/07, Max Laier <max at love2party.net> wrote:
>
> Does anyone have time to get something like this going for FreeBSD as
> well?



I tested out some solutions.  I'm not sure if this is what you guys were
looking to do, but NetBSD's solution seems fine.  I'm not thrilled about
using another rc-script to solve this issue, but I couldn't think of a
simpler/more elegant solution.

Diff is against CURRENT, and I don't currently have any boxes running
CURRENT, but I tested it as much as I could.  I'll get a box up to CURRENT
later to test other patches.

I couldn't decide what to pass in this initial ruleset.  Passing SSH seems
safe/smart, but surely not everyone will agree.

Sorry if this is way off :)

-- 
Kian Mohageri
-------------- next part --------------
A non-text attachment was scrubbed...
Name: pf_early.diff
Type: application/octet-stream
Size: 3720 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-pf/attachments/20070214/7122a33c/pf_early.obj