bsd readme: filter.inc ........

This commit is contained in:
bol-van 2022-01-24 14:28:56 +03:00
parent 7714468f4e
commit 3adf2a2806
2 changed files with 4 additions and 0 deletions

View File

@ -206,12 +206,14 @@ Only PF redirection works. PF does not allow to freely add and delete rules. Onl
To make an anchor work it must be referred from the main ruleset. But its managed by pfsense scripts.
One possible solution would be to modify '/etc/inc/filter.inc' as follows :
```
.................
/* MOD */
$natrules .= "# ZAPRET redirection\n";
$natrules .= "rdr-anchor \"zapret/*\"\n";
$natrules .= "# TFTP proxy\n";
$natrules .= "rdr-anchor \"tftp-proxy/*\"\n";
.................
```
Write the anchor code to '/etc/zapret.anchor':

View File

@ -207,12 +207,14 @@ dvtws --daemon --port 989 --dpi-desync=split2
Его трогать нельзя, иначе порушится весь фаервол.
Поэтому придется править код скриптов pfsense. Поправьте /etc/inc/filter.inc следующим образом :
-----------
.................
/* MOD */
$natrules .= "# ZAPRET redirection\n";
$natrules .= "rdr-anchor \"zapret/*\"\n";
$natrules .= "# TFTP proxy\n";
$natrules .= "rdr-anchor \"tftp-proxy/*\"\n";
.................
-----------
Напишите файл с содержимым anchor-а (например, /etc/zapret.anchor):