Take the 2-minute tour ×
Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems.. It's 100% free, no registration required.

I'm trying to figure out how to allow all hosts in $dmz to reach any host when egressing $extif. I can't seem to find the equivalence of netfilters "-o $extif", and I'd like to avoid specifically blocking everything and allow the rest.

To illustrate, I'd like to:

pass in on $dmz from $dmz:network to any via $extif keep-state

Thus, not allowing $dmz:network -> $lan.

pf version is that of FreeBSD 9.2, by the way.

share|improve this question

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.