Changes between Version 4 and Version 5 of FreeBSD PF Firewall Examples

Timestamp:

03/20/21 15:13:10 (4 years ago)

Author:

Paul Kulda

Comment:

--

FreeBSD PF Firewall Examples

@@ -100 +100 @@
 # End of config
 }}}
+
+{{{
+# default openvpn settings for the client network
+vpnclients = "10.8.0.0/24"
+#put your wan interface here (it will almost certainly be different)
+wanint = "vtnet0"
+# put your tunnel interface here, it is usually tun0
+vpnint = "tun0"
+# OpenVPN by default runs on udp port 1194
+udpopen = "{1194}"
+icmptypes = "{echoreq, unreach}"
+
+set skip on lo
+# the essential line
+nat on $wanint inet from $vpnclients to any -> $wanint
+
+block in
+pass in on $wanint proto udp from any to $wanint port $udpopen
+pass in on $wanint proto tcp from any to any port 22 keep state
+pass in on $wanint proto tcp from any to any port 80 keep state
+pass in on $wanint proto tcp from any to any port 443 keep state
+# the following two lines could be made stricter if you don't trust the clients
+pass out quick
+pass in on $vpnint from any to any
+pass in inet proto icmp all icmp-type $icmptypes
+}}}
+