diff options
| author | Joe <bousset.rudy@gmail.com> | 2022-05-02 18:39:58 +0000 |
|---|---|---|
| committer | Joe <bousset.rudy@gmail.com> | 2022-05-02 18:39:58 +0000 |
| commit | 3de2b5be8e036a984088d93cd26e8271ff43df1c (patch) | |
| tree | da9e9204de92535b07542b66980f386d8a4f6979 /usr/local/etc/pf.conf | |
| parent | Deploy (diff) | |
| download | joe-conf-3de2b5be8e036a984088d93cd26e8271ff43df1c.tar.gz joe-conf-3de2b5be8e036a984088d93cd26e8271ff43df1c.tar.bz2 joe-conf-3de2b5be8e036a984088d93cd26e8271ff43df1c.tar.xz joe-conf-3de2b5be8e036a984088d93cd26e8271ff43df1c.tar.zst joe-conf-3de2b5be8e036a984088d93cd26e8271ff43df1c.zip | |
update
Diffstat (limited to 'usr/local/etc/pf.conf')
| -rw-r--r-- | usr/local/etc/pf.conf | 10 |
1 files changed, 5 insertions, 5 deletions
diff --git a/usr/local/etc/pf.conf b/usr/local/etc/pf.conf index 1838656..c514fe8 100644 --- a/usr/local/etc/pf.conf +++ b/usr/local/etc/pf.conf @@ -10,7 +10,7 @@ table <spamd> persist table <spamd-allow> persist # Allowed webmail services -table <webmail> persist file "/usr/local/etc/pf.webmail.ip.conf" +#table <webmail> persist file "/usr/local/etc/pf.webmail.ip.conf" ## Skip loop back interface - Skip all PF processing on interface ## set skip on lo @@ -23,16 +23,16 @@ scrub in all # Pass spamd allow list -pass quick log on $ext_if inet proto tcp from <spamd-allow> to $ext_if port smtp \ +rdr pass log on $ext_if inet proto tcp from <spamd-allow> to $ext_if port smtp \ -> 127.0.0.1 port 25 # Pass webmail servers -rdr pass quick log on $ext_if inet proto tcp from <gmail> to $ext_if port smtp \ +rdr pass log on $ext_if inet proto tcp from <gmail> to $ext_if port smtp \ -> 127.0.0.1 port 25 # pass submission messages. pass quick log on $ext_if inet proto tcp from any to $ext_if port submission modulate state # Pass unknown mail to spamd rdr pass log on $ext_if inet proto tcp from {!<spamd-allow> <spamd>} to $ext_if port smtp \ - -> 127.0.0.1 port 8025 + -> 127.0.0.1 port 8025 ## Blocking spoofed packets antispoof quick for $ext_if @@ -57,4 +57,4 @@ pass quick on $ext_if proto tcp from any to any port {imap, imaps, pop3, pop3s} # Allow outgoing traffic pass out on $ext_if proto tcp from any to any modulate state pass out on $ext_if proto udp from any to any keep state -pass quick on $ext_if from any to any port http +#pass quick on $ext_if from any to any port http |