Remove some contractions.
This commit is contained in:
parent
487715cb27
commit
9f2712705b
Notes:
svn2git
2020-12-08 03:00:23 +00:00
svn path=/head/; revision=16148
1 changed files with 3 additions and 3 deletions
|
@ -46,7 +46,7 @@
|
||||||
that filters incoming and outgoing traffic from and towards Internet,
|
that filters incoming and outgoing traffic from and towards Internet,
|
||||||
but a packet filtering solution based on router may not be applicable,
|
but a packet filtering solution based on router may not be applicable,
|
||||||
either due to subnetting issues, the router is owned by the connectivity
|
either due to subnetting issues, the router is owned by the connectivity
|
||||||
supplier (<acronym>ISP</acronym>), or because it doesn't support such
|
supplier (<acronym>ISP</acronym>), or because it does not support such
|
||||||
functionalities. In these scenarios the use of a filtering bridge is
|
functionalities. In these scenarios the use of a filtering bridge is
|
||||||
highly advised.</para>
|
highly advised.</para>
|
||||||
|
|
||||||
|
@ -244,7 +244,7 @@ firewall_logging="YES"</programlisting>
|
||||||
|
|
||||||
<para>Let's look at an example setup. Note first that at the top of
|
<para>Let's look at an example setup. Note first that at the top of
|
||||||
<filename>/etc/rc.firewall</filename> there are already standard rules
|
<filename>/etc/rc.firewall</filename> there are already standard rules
|
||||||
for the loopback interface <devicename>lo0</devicename>, so we shouldn't
|
for the loopback interface <devicename>lo0</devicename>, so we should not
|
||||||
have to care for them anymore. Custom rules should be put in a separate
|
have to care for them anymore. Custom rules should be put in a separate
|
||||||
file (say <filename>/etc/rc.firewall.local</filename>) and loaded at
|
file (say <filename>/etc/rc.firewall.local</filename>) and loaded at
|
||||||
system startup, by modifying the row of
|
system startup, by modifying the row of
|
||||||
|
@ -276,7 +276,7 @@ add drop all from 172.16.0.0/12 to any in via fxp0
|
||||||
add drop all from 192.168.0.0/16 to any in via fxp0
|
add drop all from 192.168.0.0/16 to any in via fxp0
|
||||||
|
|
||||||
# Allow the bridge machine to say anything it wants
|
# Allow the bridge machine to say anything it wants
|
||||||
# (if the machine is IP-less don't include these rows)
|
# (if the machine is IP-less do not include these rows)
|
||||||
add pass tcp from 1.2.3.4 to any setup keep-state
|
add pass tcp from 1.2.3.4 to any setup keep-state
|
||||||
add pass udp from 1.2.3.4 to any keep-state
|
add pass udp from 1.2.3.4 to any keep-state
|
||||||
add pass ip from 1.2.3.4 to any
|
add pass ip from 1.2.3.4 to any
|
||||||
|
|
Loading…
Reference in a new issue