🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: bit.listserv.openbsd-pf
Article #185

Re: IP Filter Documentation.

#185
From: Peter N. M. Hansteen
Date: Sun, 05 May 2013 18:03
26 lines
2143 bytes
"Sioux C. Queue" <kant@have.it> writes:

> The FAQ at OpenSUSE is a fine document.  On the page 
> www.openbsd.org/faq/pf/tables.html I found this "or the self keyword".  On the 
> page www.openbsd.org/faq/pf/filter.html I found this "table <firewall> const { 
> self }".  And finally, I think, at www.openbsd.org/faq/pf/nat.html there's this 
> "The word self will appear if the state is floating".  All of which are nice. 
> What exactly is "self"?  The computer has two NICs, which one is "self"?  Is it 
> context dependent?  Along that same line, where can I find a list, with a 
> definition, of "keywords" for IP Filter?  They're mentioned a lot.
>
> Any and all help would be appreciated.

Your references to OpenSUSE and IP Filter had me a bit confused. 

In PF configuration, the keyword 'self' expands to all addresses
assigned to all interfaces on the host (as a man pf.conf and search for
self would have told you).

- Peter

-- 
Peter N. M. Hansteen, member of the first RFC 1149 implementation team
http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/
"Remember to set the evil bit on all malicious network traffic"
delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.
Technical Details
Message-ID: <87a9o9u3r0.fsf@deeperthought.bsdly.net>
Path: arc1-ca.pugleaf.net!bp1ni1624pbd.1!nntp.google.com!npeer01.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!spln!newsgate.newsguy.com!newsp.newsguy.com!mdrn
References: <km3t67$19g$2@dont-email.me>

Show Full Headers
Complete Article Headers
X-Google-Thread: ff4ef,aebde3ebc6677907
X-Google-NewGroupId: yes
X-Google-Attributes: gidbffa70e3,domainid0,public,usenet
X-Google-Language: ENGLISH,ASCII-7-bit
X-Received: by 10.66.145.35 with SMTP id sr3mr6805124pab.6.1367777039173;
        Sun, 05 May 2013 11:03:59 -0700 (PDT)
Path: arc1-ca.pugleaf.net!bp1ni1624pbd.1!nntp.google.com!npeer01.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!spln!newsgate.newsguy.com!newsp.newsguy.com!mdrn
From: peter@bsdly.net (Peter N. M. Hansteen)
Newsgroups: bit.listserv.openbsd-pf
Subject: Re: IP Filter Documentation.
Date: 5 May 2013 11:03:57 -0700
Organization: None
Lines: 26
Message-ID: <87a9o9u3r0.fsf@deeperthought.bsdly.net>
References: <km3t67$19g$2@dont-email.me>
NNTP-Posting-Host: sonofskinny.bsdly.net
Mime-Version: 1.0
NNTP-Posting-Date: 5 May 2013 18:03:58 GMT
X-Received-Bytes: 1773
Content-Type: text/plain