From e0a0da5b50549efc619ced7869471da9dba9524a Mon Sep 17 00:00:00 2001 From: tschettervictor <85497460+tschettervictor@users.noreply.github.com> Date: Wed, 10 Dec 2025 17:15:56 -0700 Subject: [PATCH] setup: antispoof 4/6 for pf --- usr/local/share/bastille/setup.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/usr/local/share/bastille/setup.sh b/usr/local/share/bastille/setup.sh index 277704bb..a1e2b366 100644 --- a/usr/local/share/bastille/setup.sh +++ b/usr/local/share/bastille/setup.sh @@ -355,7 +355,7 @@ rdr-anchor "rdr/*" block in all pass out quick keep state -antispoof for \$ext_if inet +antispoof for \$ext_if pass in proto tcp from any to any port ssh flags S/SA keep state EOF sysrc pf_enable=YES