Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 23 May 2007 12:06:50 +0700
From:      Vasily Ivanov <freebsdpf@academ.org>
To:        freebsd-pf@freebsd.org
Subject:   source limiting NATed connections
Message-ID:  <200705231206.50584.freebsdpf@academ.org>

next in thread | raw e-mail | index | archive | help
Hi!

I am using PF on my external gateway, and wondering if it is possible to 
source limit state entries created by nat rules.

When I try to put rule like this: "nat on $ext_if from $private_net to any -> 
$nat_addr (source-track rule, max-src-states 10)" into pf.conf I get 
a "syntax error" message. 

There're no other rules besides firewalling the gateway itself in pf.conf.

Thanks a lot.

-- 
Vasily Ivanov



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200705231206.50584.freebsdpf>