Here is my pf.conf:
tcp_pass = "{80 22}"
ext_if = "xl0"
int_if = "xl1"
localnet = $int_if:network
nat on $ext_if from $localnet to any -> ($ext_if)
pass out on xl0 proto udp to any port $tcp_pass keep state
with this config, I can surf the net on the firewall machine, but cannot surf the net on any client on my internal network.
If I insert a 'pass all' into the pf.conf file, I can surf the net from the clients....
anyone know why?
Start Free Trial
