Re: "egress" group

2018-06-26 Thread Joseph Ward
Thank you; I didn't even realize I could rename the interface.  Part of the install script already has to deal with the varying interface names for rc.conf, so I'll just change the name there. The other suggestion, about adding the cards to a group would be about the same effort, but since I do ha

Re: "egress" group

2018-06-26 Thread Patrick Lamaiziere
Le Mon, 25 Jun 2018 16:12:49 -0400, Joseph Ward a écrit : Hello, > My goal is for this pf.conf to be able to be used on multiple systems > which unfortunately have different network cards, so the interface > names are different.  If "egress" isn't going to work, is there > another way to accompl

Re: "egress" group

2018-06-25 Thread Kristof Provost
On 25 Jun 2018, at 22:12, Joseph Ward wrote: My current pf.conf contains the following lines (with a lot of other stuff redacted for irrelevance): ext_if="em0" ... block log all pass in on $ext_if proto tcp from any to any port 22 flags S/SA keep state and it works great; ssh is able to get

"egress" group

2018-06-25 Thread Joseph Ward
My current pf.conf contains the following lines (with a lot of other stuff redacted for irrelevance): ext_if="em0" ... block log all pass in on $ext_if proto tcp from any to any port 22 flags S/SA keep state and it works great; ssh is able to get in.  However, when I change "$ext_if" to "egress"