Attachment 'pf_boot_client.conf.txt'
Download 1 # Default deny.
2 block all
3
4 # Don't block loopback.
5 pass on lo0
6
7 # Allow outgoing dns, needed by pfctl to resolve names.
8 pass out proto { tcp, udp } from any to any port 53 keep state
9
10 # Allow outgoing ping request, might be needed by dhclient to validate
11 # old (but valid) leases in /var/db/dhclient.leases in case it needs to
12 # fall back to such a lease (the dhcp server can be down or not responding).
13 pass out inet proto icmp all icmp-type echoreq keep state
14
15 # Allow IPv6 router/neighbor sollicitation and advertisement.
16 pass out inet6 proto icmp6 all icmp6-type neighbrsol
17 pass in inet6 proto icmp6 all icmp6-type neighbradv
18 pass out inet6 proto icmp6 all icmp6-type routersol
19 pass in inet6 proto icmp6 all icmp6-type routeradv
Attached Files
To refer to attachments on a page, use attachment:filename, as shown below in the list of files. Do NOT use the URL of the [get] link, since this is subject to change and can break easily.You are not allowed to attach a file to this page.