Article View: bit.listserv.openbsd-pf
Article #185Re: IP Filter Documentation.
From: Peter N. M. Hansteen
Date: Sun, 05 May 2013 18:03
Date: Sun, 05 May 2013 18:03
26 lines
2143 bytes
2143 bytes
"Sioux C. Queue" <kant@have.it> writes:
> The FAQ at OpenSUSE is a fine document. On the page
> www.openbsd.org/faq/pf/tables.html I found this "or the self keyword". On the
> page www.openbsd.org/faq/pf/filter.html I found this "table <firewall> const {
> self }". And finally, I think, at www.openbsd.org/faq/pf/nat.html there's this
> "The word self will appear if the state is floating". All of which are nice.
> What exactly is "self"? The computer has two NICs, which one is "self"? Is it
> context dependent? Along that same line, where can I find a list, with a
> definition, of "keywords" for IP Filter? They're mentioned a lot.
>
> Any and all help would be appreciated.
Your references to OpenSUSE and IP Filter had me a bit confused.
In PF configuration, the keyword 'self' expands to all addresses
assigned to all interfaces on the host (as a man pf.conf and search for
self would have told you).
- Peter
--
Peter N. M. Hansteen, member of the first RFC 1149 implementation team
http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/
"Remember to set the evil bit on all malicious network traffic"
delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.
Technical Details
Message-ID:
<87a9o9u3r0.fsf@deeperthought.bsdly.net>Path:
arc1-ca.pugleaf.net!bp1ni1624pbd.1!nntp.google.com!npeer01.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!spln!newsgate.newsguy.com!newsp.newsguy.com!mdrnReferences:
<km3t67$19g$2@dont-email.me>Show Full Headers
Complete Article Headers
X-Google-Thread: ff4ef,aebde3ebc6677907
X-Google-NewGroupId: yes
X-Google-Attributes: gidbffa70e3,domainid0,public,usenet
X-Google-Language: ENGLISH,ASCII-7-bit
X-Received: by 10.66.145.35 with SMTP id sr3mr6805124pab.6.1367777039173;
Sun, 05 May 2013 11:03:59 -0700 (PDT)
Path: arc1-ca.pugleaf.net!bp1ni1624pbd.1!nntp.google.com!npeer01.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!spln!newsgate.newsguy.com!newsp.newsguy.com!mdrn
From: peter@bsdly.net (Peter N. M. Hansteen)
Newsgroups: bit.listserv.openbsd-pf
Subject: Re: IP Filter Documentation.
Date: 5 May 2013 11:03:57 -0700
Organization: None
Lines: 26
Message-ID: <87a9o9u3r0.fsf@deeperthought.bsdly.net>
References: <km3t67$19g$2@dont-email.me>
NNTP-Posting-Host: sonofskinny.bsdly.net
Mime-Version: 1.0
NNTP-Posting-Date: 5 May 2013 18:03:58 GMT
X-Received-Bytes: 1773
Content-Type: text/plain