mirror of
https://github.com/hackacad/bastille.git
synced 2025-12-18 16:21:32 +01:00
Explain permissive NAT
This commit is contained in:
@@ -57,7 +57,8 @@ This basic /etc/pf.conf allow incoming packets on the bridge interface, and NATs
|
||||
|
||||
set skip on lo
|
||||
scrub in
|
||||
|
||||
|
||||
# permissive NAT allows jail bridge and wireguard tunnels
|
||||
nat on $ext_if inet from !($ext_if) -> ($ext_if:0)
|
||||
|
||||
block in
|
||||
|
||||
Reference in New Issue
Block a user