Make the group egress optional (dynamic) in the initial pf rule
This commit is contained in:
parent
333f7ac6d7
commit
91eb82f902
1 changed files with 1 additions and 1 deletions
|
@ -619,7 +619,7 @@ agent_pf(struct system_config *sc, int open)
|
|||
return (0);
|
||||
|
||||
if (open)
|
||||
ret = shellout("pass out proto tcp from egress to port www\n",
|
||||
ret = shellout("pass out proto tcp from (egress) to port www\n",
|
||||
NULL, "pfctl", "-f", "-", NULL);
|
||||
else
|
||||
ret = shellout("\n", NULL, "pfctl", "-f", "-", NULL);
|
||||
|
|
Loading…
Reference in a new issue