Thread: pf.conf help?
View Single Post
Old 28th January 2018
Prevet Prevet is offline
Shell Scout
 
Join Date: Oct 2017
Posts: 84
Default

This is the link that has the PF rules I put in:

https://airvpn.org/topic/1713-win-ma...nbsd#entry1764

If you search that page for "your_network_interface" you will see them discussing it.

Also this number could be different on your machine. I can't remember what program I used to report what it is on my machine.

Quote:
"Various Internet bodies have set aside three subnets for use on private
networks. You cannot use them on the public Internet, but anybody can use
them on a private network. The networks 10.0.0.0/8, 172.16.0.0/12, and
192.168.0.0/16
are freely usable by organizations. You’ll see these
addresses in huge organizations and home networks, and have probably
encountered some of them already. These addresses are also globally
unique, within your organization. Your hosts should never see these
addresses elsewhere, and other networks should never see these addresses
on your network." - From Networking for Systems Administrators, by Michael Lucas
Quote:
For my machine:
block out on em0 from 192.168.0.0/16 to any
pass out quick on em0 from 192.168.0.0/16 to <insert 1st vpn server IP here>
pass out quick on em0 from 192.168.0.0/16 to <insert 2nd vpn server IP here>
pass out quick on em0 from 192.168.0.0/16 to <insert 3rd vpn server IP here>
pass out quick on em0 from 192.168.0.0/16 to <insert 4th vpn server IP here>
pass out quick on tun0 from any to any

****

I just noticed you can find the number (192.168.0.0/16) for your machine, if you use ifconfig command. Look in the section that has the media: Ethernet that I mentioned in the post above. For me it is the last line that has netmask 0xffffff00 broadcast 192.168.... Netmasks are explained in the Michael Lucas book.

Last edited by Prevet; 28th January 2018 at 01:14 PM.
Reply With Quote