#### $Id: example-pf.conf.local 943 2007-04-07 14:00:26Z jhealy $ #### #### This is an example local PF configuration file. The rules that #### appear in this file will be applied to all traffic before the exiler #### queue rules are evaluated, so they provide an opportunity to set a #### default policy (block or allow), as well as "exempt" certain traffic #### from exile by passing it to a queue before the exile rules happen. #### #### This file can be empty, but it must exist (or the PF rules won't #### load). Note that an empty file is dangerous; you'll be relying on #### the PF defaults to pass your traffic. #### # Define the management interface, so we can allow traffic to this machine LOCAL_IF="dc0" # block by default block log all # firewall interface; allow all for now pass on $LOCAL_IF all # Put any "special" rules here. For example, you might want to put # a "pass quick" rule here that exempts certain machines, ports, or # networks from being put in the queues.