pastos trunk tip @
authorsevan <sevan@NetBSD.org>
Sat, 21 Sep 2019 23:55:01 +0000
branchtrunk
changeset 454569 59009e2d86f6
parent 454568 6f804c91f109
pastos
share/examples/npf/soho_gw-npf.conf
--- a/share/examples/npf/soho_gw-npf.conf	Sat Sep 21 21:10:56 2019 +0000
+++ b/share/examples/npf/soho_gw-npf.conf	Sat Sep 21 23:55:01 2019 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: soho_gw-npf.conf,v 1.16 2019/09/21 21:10:56 sevan Exp $
+# $NetBSD: soho_gw-npf.conf,v 1.17 2019/09/21 23:55:01 sevan Exp $
 #
 # SOHO border
 #
@@ -42,14 +42,14 @@
 	# Block inbound traffic from those on the block table 
 	block in from <block>
 
-	# Allow SSH on wired interface and log all connection attempts
+	# Allow inbound SSH and log all connection attempts
 	pass stateful in family inet4 proto tcp to $ext_v4 port ssh \
 		apply "log"
 
 	# Allow inbound traffic for services hosted on TCP
 	pass stateful in proto tcp to $ext_addrs port $services_tcp
 
-	# Allow inbound traffic for services hosted on TCP
+	# Allow inbound traffic for services hosted on UDP
 	pass stateful in proto udp to $ext_addrs port $services_udp
 
 	# Passive FTP