[FUG-BR] PF + Scrub .

[Paulo Henrique]

EXT_IF = "re0"
INI_IF = "xl0"
DMZ_IF = "xl1"

Em 1 de fevereiro de 2010 17:17, Marcelo/Porks
<marcelorossi em gmail.com> escreveu:
> 2010/1/29 Paulo Henrique <paulo.rddck em bsd.com.br>:
>> Segue abaixo minhas regras.
>>
>> scrub in on $INT_IF all fragment reassemble
>> scrub in on $INT_IF all no-df
>> scrub on $INT_IF all reassemble tcp
>>
>> saida pfctl -nf $arquivo
>>
>> # pfctl  -nf /root/firewall/pf.conf
>> /root/firewall/pf.conf:88: syntax error
>>
>> Linha 88 = scrub in on $INT_IF all fragment reassemble
>
> Diga o valor de $INT_IF
>
> Fiz aqui e funcionou:
>
> mt# grep scrub /etc/pf.conf
> scrub in on $IF_Int_Prisma all fragment reassemble
> scrub in on $All_IF_Int all fragment reassemble
>
> mt# grep "All_IF_Int =" /etc/pf.conf
> All_IF_Int = "{ " $IF_Int_Aplic $IF_Int_Prisma $IF_Int_ATAs $IF_Int_Servs " }"
>
> mt# grep "IF_Int_Prisma =" /etc/pf.conf
> IF_Int_Prisma = "vlan101"
> IP_IF_Int_Prisma = "( " $IF_Int_Prisma " )"
>
> mt# pfctl -nf /etc/pf.conf
> #
>
> --
> Marcelo Rossi
> "This e-mail is provided "AS IS" with no warranties, and confers no rights."
> -------------------------
> Histórico: http://www.fug.com.br/historico/html/freebsd/
> Sair da lista: https://www.fug.com.br/mailman/listinfo/freebsd
>



-- 
:=)>Paulo Henrique (JSRD)<(=:

Alone,  locked, a survivor, unfortunately not know who I am