Mirrors/BastilleBSD_bastille
1
0
Fork 1
mirror of https://github.com/BastilleBSD/bastille.git synced 2025-12-11 09:29:55 +01:00
Code Issues Packages Projects Releases Wiki Activity

update default firewalls to support ipv6 by default

Browse Source
This commit is contained in:
Christer Edwards
2025-07-20 18:39:17 -06:00
parent bdcf921c1d
commit 5e79dcb1d2
3 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
docs/chapters/gcp.rst
View File

@@ -69,7 +69,7 @@ them through the external interface:
pass out
pass in proto tcp to port {22}
pass in inet proto icmp icmp-type { echoreq }
pass in proto icmp icmp-type { echoreq }
pass in on $bridge_if
Restart the host and make sure everything comes up correctly. You should see the

2
docs/chapters/networking.rst
View File

@@ -469,7 +469,7 @@ Create the firewall rules:
block in all
pass out quick keep state
antispoof for $ext_if inet
pass in inet proto tcp from any to any port ssh flags S/SA modulate state
pass in proto tcp from any to any port ssh flags S/SA modulate state
- Make sure to change the ``ext_if`` variable to match your host system
interface.

2
usr/local/share/bastille/setup.sh
View File

@@ -277,7 +277,7 @@ rdr-anchor "rdr/*"
block in all
pass out quick keep state
antispoof for \$ext_if inet
pass in inet proto tcp from any to any port ssh flags S/SA keep state
pass in proto tcp from any to any port ssh flags S/SA keep state
EOF
sysrc pf_enable=YES
warn "pf ruleset created, please review ${bastille_pf_conf} and enable it using 'service pf start'."