BSD use SYN,ACK filter to catch autottl

This commit is contained in:
bol-van 2024-03-09 12:48:22 +03:00
parent 5ef3fb9e97
commit 0a0fcbf14c

View File

@ -334,6 +334,7 @@ requires root.
`/etc/pf.conf`: `/etc/pf.conf`:
``` ```
pass in quick on em0 proto tcp from port {80,443} flags SA/SA divert-packet port 989 no state
pass in quick on em0 proto tcp from port {80,443} no state pass in quick on em0 proto tcp from port {80,443} no state
pass out quick on em0 proto tcp to port {80,443} divert-packet port 989 pass out quick on em0 proto tcp to port {80,443} divert-packet port 989
``` ```