Update to r49796:

A rule for the time service in the ipfw example was replaced by NTP
in r49600.  The "setup" keyword removed now as it is TCP specific.
This commit is contained in:
Bjoern Heidotting 2017-01-17 20:18:04 +00:00
parent fe39f41563
commit 6df3d586c6
Notes: svn2git 2020-12-08 03:00:23 +00:00
svn path=/head/; revision=49869

View file

@ -5,7 +5,7 @@
$FreeBSD$
$FreeBSDde: de-docproj/books/handbook/firewalls/chapter.xml,v 1.53 2012/04/30 16:15:52 bcr Exp $
basiert auf: r49600
basiert auf: r49796
-->
<chapter xmlns="http://docbook.org/ns/docbook"
xmlns:xlink="http://www.w3.org/1999/xlink" version="5.0"
@ -2227,7 +2227,7 @@ pif="dc0" # interface name of NIC attached to Internet</programlisting>
&dollar;cmd 00250 allow icmp from any to any out via &dollar;pif keep-state
# Allow outbound NTP
&dollar;cmd 00260 allow udp from any to any 123 out via &dollar;pif setup keep-state
&dollar;cmd 00260 allow udp from any to any 123 out via &dollar;pif keep-state
# Allow outbound SSH
&dollar;cmd 00280 allow tcp from any to any 22 out via &dollar;pif setup keep-state