diff options
| author | Henning Brauer <henning@cvs.openbsd.org> | 2003-07-29 17:52:18 +0000 |
|---|---|---|
| committer | Henning Brauer <henning@cvs.openbsd.org> | 2003-07-29 17:52:18 +0000 |
| commit | 50caf9b1c4e0a7c52147f73720a846d0946c0e39 (patch) | |
| tree | f240e3115148c9a37fb0dfe0b841554ff0ce162b | |
| parent | 76feedd79e9d2ccd453e2fb721a6c76f7b27be87 (diff) | |
"pass on lo0" in the intermediate pf ruleset loaded during boot.
solves PR3376 by matthew.gream@pobox.com, fix slightly different
ok mcbride@ deraadt@
| -rw-r--r-- | etc/rc | 3 |
1 files changed, 2 insertions, 1 deletions
@@ -1,4 +1,4 @@ -# $OpenBSD: rc,v 1.227 2003/05/14 18:41:06 ian Exp $ +# $OpenBSD: rc,v 1.228 2003/07/29 17:52:17 henning Exp $ # System startup script run by init on autoboot # or after single-user. @@ -120,6 +120,7 @@ ttyflags -a if [ "X${pf}" != X"NO" ]; then RULES="block all" + RULES="$RULES\npass on lo0" RULES="$RULES\npass in proto tcp from any to any port 22 keep state" RULES="$RULES\npass out proto { tcp, udp } from any to any port 53 keep state" RULES="$RULES\npass out inet proto icmp all icmp-type echoreq keep state" |