Merge pull request #1200 from BastilleBSD/firewall_fix

update default firewalls to support ipv6 by default
This commit is contained in:
tschettervictor
2025-07-22 11:45:30 -06:00
committed by GitHub
3 changed files with 3 additions and 3 deletions

View File

@@ -277,7 +277,7 @@ rdr-anchor "rdr/*"
block in all
pass out quick keep state
antispoof for \$ext_if inet
pass in inet proto tcp from any to any port ssh flags S/SA keep state
pass in proto tcp from any to any port ssh flags S/SA keep state
EOF
sysrc pf_enable=YES
warn "pf ruleset created, please review ${bastille_pf_conf} and enable it using 'service pf start'."