[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Further exploration of DHCP and Packet Filter.
In the effort to get as much out of a dhcp based vpn client. I am looking
a some of my rules that I am using on the static ip machines and seeing how
they apply. Anyone got any thoughts on this one. I think this is a great
rule for the static machines. Since everything is natted this says dont let
someone on the outside use me as a router. (At least that is the way I
interpret this rule). Problem is that this will break on a reboot with a
I would be nice to have a macro that says get the IP that is assigned to an
interface and assign it to a variable. Anyone have any ideas??
## Let all traffic out through the outside interface using tcp, udp or icmp
pass out log quick on $ext_if proto udp from $ext_ip to any keep state
pass out log quick on $ext_if proto tcp from $ext_ip to any keep state
pass out log quick on $ext_if proto icmp from $ext_ip to any keep state
Senior Network Engineer