On Thu, 13 Sep 2012 23:26:48 +0200 Olivier Cochard-Labbé <[email protected]> wrote:
> Hi, > here is a little patch (tested on FreeBSD 9.1-RC1) that add a new > option to the kernel configuration file: > options PF_DEFAULT_TO_DROP > > Without this option, with an empty pf.conf: All traffic are permit. > With this option enabled, with an empty pf.conf: All traffic are > dropped by default. I really do not think that such a patch is needed. A simple 'block all' in pf.conf will do the same, so why add code and recompile the kernel? Also if you are setting up a remote server you probably do not want to _not_ be able to access it. Andreas -- GnuPG key : 0x2A573565 | http://www.gnupg.org/howtos/de/ Fingerprint: 925D 2089 0BF9 8DE5 9166 33BB F0FD CD37 2A57 3565 _______________________________________________ [email protected] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-pf To unsubscribe, send any mail to "[email protected]"
