Unix Technical Forum

Check my PF

This is a discussion on Check my PF within the lucky.openbsd.misc forums, part of the OpenBSD category; --> Can you please take a look at my pf.conf ? is there anything wrong with it ? everything seem ...


Go Back   Unix Technical Forum > Unix Operating Systems > OpenBSD > lucky.openbsd.misc

Register FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 02-18-2008, 06:07 AM
S t i n g r a y
 
Posts: n/a
Default Check my PF

Can you please take a look at my pf.conf ?

is there anything wrong with it ? everything seem to work fine, how about traffic shaping ? how can i chack it ?

intif="epic0"
intnet="10.0.0.0/16"
extif="fxp0"
extad="192.168.0.2/32"
chadd="10.0.0.1/32"
servers="10.0.0.2, 10.0.0.3, 10.0.0.4, 10.0.0.5, 10.0.0.6"
mailserver="10.0.0.2"
vip="10.0.0.5"
ports = "22 25 53 80 110 119 123 143 443 554 1755 1863 3389 5000 5001 5050 5100 5190 6667 11999"
allif="{$extif, intif}"
table <allowedclients> persist file "/etc/allowedclients"
table <blockedclients> persist file "/etc/blockedclients"
scrub in all
altq on $extif priq bandwidth 500Kb queue{msn, www, https, smtp, ftp, ssh}
queue msn priority 14
queue ssh priority 15
queue https priority 13
queue www priority 10
queue smtp priority 8
queue ftp priority 7 priq(default)
nat on $extif inet proto {tcp, udp } from <allowedclients> to any port { $ports } -> $extad
rdr on $intif proto tcp from <allowedclients> to any port 80 -> $chadd port 8080
rdr on $extif proto tcp from any to $extad port 25 -> $mailserver port 25
rdr on $extif proto tcp from any to $extad port 80 -> $mailserver port 80
pass out on $extif inet proto { tcp, udp } from <allowedclients> to any port { $ports }
pass in on extif proto tcp from <allowedclients> to any port msn queue msn
pass in on extif proto tcp from <allowedclients> to any port ssh queue ssh
pass in on extif proto tcp from <allowedclients> to any port www queue https
pass in on extif proto tcp from <allowedclients> to any port www queue www
pass in on extif proto tcp from <allowedclients> to any port smtp queue smtp
pass in on extif proto tcp from <allowedclients> to any port ftp queue ftp
pass out on extif inet proto udp from any to <allowedclients> port msn queue msn
pass out on extif inet proto udp from any to <allowedclients> port ssh queue ssh
pass out on extif inet proto udp from any to <allowedclients> port www queue https
pass out on extif inet proto udp from any to <allowedclients> port www queue www
pass out on extif inet proto udp from any to <allowedclients> port smtp queue smtp
pass out on extif inet proto udp from any to <allowedclients> port ftp queue ftp

*B:B$., B8B8,.B$B:*B(B(B(*B$ Stingray *B:B$., B8B8,.B$B:*B(B(*B$

Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On
Forum Jump


All times are GMT. The time now is 05:07 PM.


Powered by vBulletin® Version 3.6.5
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
SEO by vBSEO 3.2.0
www.UnixAdminTalk.com