On 24/09/2007, Reinhard Haller <[EMAIL PROTECTED]> wrote:
> Hi,
>
> I want to restrict the locally generated outgoing traffic from the nat
> gateway (cvsup, ddclient i.e. http + https, portupgrade i.e. ftp + http)
> to the internet.
>
> How to distinguish forwarded traffic on tun0 from the local traffic
> after natting?
>
> Thanks
> Reinhard
>
> _______________________________________________
> [email protected] mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-pf
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"
>
Try this:
block on $ext_if all
pass in on $int_if from <network> to any

-- 
Gilberto Villani Brito
System Administrator
Londrina - PR
Brazil
gilbertovb(a)gmail.com
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to