bsd readme: filter.inc ........

This commit is contained in:
bol-van 2022-01-24 14:28:56 +03:00
parent 7714468f4e
commit 3adf2a2806
2 changed files with 4 additions and 0 deletions

View File

@ -206,12 +206,14 @@ Only PF redirection works. PF does not allow to freely add and delete rules. Onl
To make an anchor work it must be referred from the main ruleset. But its managed by pfsense scripts. To make an anchor work it must be referred from the main ruleset. But its managed by pfsense scripts.
One possible solution would be to modify '/etc/inc/filter.inc' as follows : One possible solution would be to modify '/etc/inc/filter.inc' as follows :
``` ```
.................
/* MOD */ /* MOD */
$natrules .= "# ZAPRET redirection\n"; $natrules .= "# ZAPRET redirection\n";
$natrules .= "rdr-anchor \"zapret/*\"\n"; $natrules .= "rdr-anchor \"zapret/*\"\n";
$natrules .= "# TFTP proxy\n"; $natrules .= "# TFTP proxy\n";
$natrules .= "rdr-anchor \"tftp-proxy/*\"\n"; $natrules .= "rdr-anchor \"tftp-proxy/*\"\n";
.................
``` ```
Write the anchor code to '/etc/zapret.anchor': Write the anchor code to '/etc/zapret.anchor':

View File

@ -207,12 +207,14 @@ dvtws --daemon --port 989 --dpi-desync=split2
Его трогать нельзя, иначе порушится весь фаервол. Его трогать нельзя, иначе порушится весь фаервол.
Поэтому придется править код скриптов pfsense. Поправьте /etc/inc/filter.inc следующим образом : Поэтому придется править код скриптов pfsense. Поправьте /etc/inc/filter.inc следующим образом :
----------- -----------
.................
/* MOD */ /* MOD */
$natrules .= "# ZAPRET redirection\n"; $natrules .= "# ZAPRET redirection\n";
$natrules .= "rdr-anchor \"zapret/*\"\n"; $natrules .= "rdr-anchor \"zapret/*\"\n";
$natrules .= "# TFTP proxy\n"; $natrules .= "# TFTP proxy\n";
$natrules .= "rdr-anchor \"tftp-proxy/*\"\n"; $natrules .= "rdr-anchor \"tftp-proxy/*\"\n";
.................
----------- -----------
Напишите файл с содержимым anchor-а (например, /etc/zapret.anchor): Напишите файл с содержимым anchor-а (например, /etc/zapret.anchor):