Discussion:
npf documentation
(too old to reply)
Patrick Welche
2019-05-14 09:25:10 UTC
Permalink
http://rmind.github.io/npf/stateful.html

group "external" on $ext_if {
block all
pass stateful in final proto tcp flags S/SA to $ext_if port ssh
}


npfctl: address family mismatch


--
Posted automagically by a mail2news gateway at muc.de e.V.
Please direct questions, flames, donations, etc. to news-***@muc.de
Mike Pumford
2019-05-14 20:32:22 UTC
Permalink
Post by Patrick Welche
http://rmind.github.io/npf/stateful.html
group "external" on $ext_if {
block all
pass stateful in final proto tcp flags S/SA to $ext_if port ssh
}
npfctl: address family mismatch
Does $ext_if have a v4 and v6 address. I found that npf didn't like that.

Mike

--
Posted automagically by a mail2news gateway at muc.de e.V.
Please direct questions, flames, donations, etc. to news-***@muc.de
Loading...