Re: Translate IPFW rules to PF rules

"Bert Moorthaemer" <nospam.bert.moorthaemer@xxxxxxxxxx> writes:

Second) there is the "me" keyword in IPFW which I use a couple of times
(there are 5 interfaces in my firewall with each an ip and aliases on them)
Is there a method in PF that leads to the same result as the "me" keyword?

first, get a table into scope and load it up with the necessary values:

table <SELF> persist { self };

then refer to <SELF> in the obvious way. DON'T write bare references
to "self" unless you like seeing all your rules multiplied by the
number of interfaces you have up (I have boxes where the cardinality
of <SELF> is on the high side of 50, so this is A Big Deal to me.)

regards,
Ross
.

Relevant Pages

  • Re: Web server behind Symantec Enterprise Firewall
    ... It seems it does not matter wich interfaces i set at the rule, ... tries to route it trought the same interface. ... firewall to the internal sever?... ... > on the firewall to point to the web server. ...
    (comp.security.firewalls)
  • Re: Fw: Serious Security Issue in Windows XP SP2s Firewall
    ... This applies to all interfaces. ... >> unreachable, and it was a domain member, and you then installed SP2, the ... > different policy to override this. ... >> not have NB filtered by the firewall. ...
    (Focus-Microsoft)
  • Re: router and adsl?
    ... Most firewall vendors have boxes with 3 interfaces. ... choice if you have a limited budget and arenīt too paranoid. ... >> network, but not with the other company. ...
    (microsoft.public.win2000.security)
  • Re: Lan to Wan reprise
    ... the machines on the Lan can't get past the firewall. ... #if you're a router (and thus should forward IP packets between interfaces), ... iptables -P INPUT DROP ...
    (Fedora)
  • Re: FW1 Multiple Interfaces & Securid
    ... > authentication with my ace/server. ... > When I try to authenticate using the agent on FW1 -> ACE with all of ... > When I disable the DMZ and internet interfaces it works! ... > interfaces on the firewall. ...
    (comp.security.firewalls)