Adding some system-wide things
This commit is contained in:
parent
63bb5cb154
commit
8cdab9a308
21
my_etc/npf.conf
Normal file
21
my_etc/npf.conf
Normal file
@ -0,0 +1,21 @@
|
||||
# TODO: Allow in ICMP(v6) by message type
|
||||
# TODO: Rate-limit ssh
|
||||
|
||||
# ICMP(v6)
|
||||
alg "icmp"
|
||||
|
||||
group "services" in on vioif0 {
|
||||
pass stateful proto tcp to any port ssh
|
||||
}
|
||||
|
||||
group "localhost" in on lo0 {
|
||||
pass stateful all
|
||||
}
|
||||
|
||||
group default {
|
||||
# Default rule
|
||||
block all
|
||||
|
||||
# Let it goooooo
|
||||
pass stateful out all
|
||||
}
|
1
my_usr/pkg/etc/doas.conf
Normal file
1
my_usr/pkg/etc/doas.conf
Normal file
@ -0,0 +1 @@
|
||||
permit persist keepenv setenv { PATH } :wheel
|
Loading…
x
Reference in New Issue
Block a user