Re: pf - allow only inbound packets to be forwarded

2010-07-04 Thread Robert
Christopher Zimmermann wrote: as I understand, pf cannot tell incoming packets destined to the local machine from incoming packets to be forwarded. With iptables I 1) read "man pf.conf" about * tables, to have a list of your "allowed" machines (e.g. laptop) * macros, e.g. "(tun0)" will be repl

Re: pf - allow only inbound packets to be forwarded

2010-07-04 Thread Peter N. M. Hansteen
Christopher Zimmermann writes: > as I understand, pf cannot tell incoming packets destined to the > local machine from incoming packets to be forwarded. wrong. write better filtering criteria. > With pf I could do it by blocking all packets having a destination > ip hosted by the desktop. But

pf - allow only inbound packets to be forwarded

2010-07-04 Thread Christopher Zimmermann
Hi, I have two machines. One desktop and one mobile laptop. They are connected to each other via wlan. The desktop is connected to the internet vie pppoe and provides internet connectivity to the laptop via nat. On the desktop I would like to block all incoming packets destined to the desktop mac