diff --git a/config/action.d/pf.conf b/config/action.d/pf.conf index 5710eb8e..ea70d894 100644 --- a/config/action.d/pf.conf +++ b/config/action.d/pf.conf @@ -16,7 +16,7 @@ # we don't enable PF automatically; to enable run pfctl -e # or add `pf_enable="YES"` to /etc/rc.conf (tested on FreeBSD) actionstart = echo "table <-> persist counters" | pfctl -f- - echo "block proto from <-> to any" | pfctl -f- + echo "block proto from <-> to " | pfctl -f- # Option: actionstop @@ -76,14 +76,20 @@ protocol = tcp # Notes.: specifies port to monitor # Values: [ NUM | STRING ] Default: # -port = telnet +#port = telnet # Option: actiontype # Notes.: defines additions to the blocking rule # Values: leave empty to block all attempts from the host -actiontype = +# Default: Value of the allports +actiontype = any + +# Option: allports +# Notes.: default addition to block all ports +# Usage.: use in jail config: "banaction = pf[actiontype=]" +allports = any # Option: multiport # Notes.: addition to block access only to specific ports # Usage.: use in jail config: "banaction = pf[actiontype=]" -multiport = port +multiport = any port