Thread: pf.conf help?
View Single Post
  #1   (View Single Post)  
Old 22nd January 2018
ucharfli ucharfli is offline
Port Guard
 
Join Date: May 2017
Posts: 22
Default pf.conf help?

Hi guys;
I use wireless modem. How do I structure the security wall.
I want my IP address not to go out when I use a VPN. Can you write a PF rule for me?
The traffic will go through the VPN and the normal internet will not come out when the attack and the attacking VPN are disconnected.

I'm ignorant about security.
I do not know PF.
Can you help me please?
My pf.conf
Code:
#	$OpenBSD: pf.conf,v 1.55 2017/12/03 20:40:04 sthen Exp $
#
# See pf.conf(5) and /etc/examples/pf.conf
wlan_if="ra0"

set skip on lo

block return	# block stateless traffic
pass		# establish keep-state

# By default, do not permit remote connections to X11
block return in on ! lo0 proto tcp to port 6000:6010

# Port build user does not need network
block return out log proto {tcp udp} user _pbuild

antispoof for { lo0 $wlan_if } inet

match in all scrub (no-df random-id)
Reply With Quote