mirror of
https://github.com/opnsense/src.git
synced 2026-06-05 06:42:56 -04:00
2339ead638
add support to pf for filtering a packet by the interface it was received
on. use the received-on IFNAME filter option on a pf.conf rule to restrict
which packet the interface had to be received on. eg:
pass out on em0 from $foo to $bar received-on fxp0
ive been running this in production for a week now. i find it particularly
usefull with interface groups.
no objections, and a few "i like"s from henning, claudio, deraadt, mpf
Obtained from: OpenBSD, dlg <dlg@openbsd.org>, 95b4320893
Sponsored by: Rubicon Communications, LLC ("Netgate")
Differential Revision: https://reviews.freebsd.org/D46577
|
||
|---|---|---|
| .. | ||
| libpfctl.c | ||
| libpfctl.h | ||
| Makefile | ||
| Makefile.depend | ||