rdr pass on em0 inet proto tcp from any to 192.168.1.184 port 8080 -> 192.168.1.184 port 80 #注意规则次序,根据 pf.conf 规则,转发规则应位于过滤规则之前,相关内容请参考帮助 #过滤规则
block all pass quick on lo0 all #设置任何设备可以访问服务器的 22、80、443、4200、10000 端口
pass in quick proto tcp from any to 192.168.1.184 port { 22,80,443,4200,10000 }
pass out quick proto tcp from 192.168.1.184 port { 22,80,443,4200,10000 } to any
pass out quick proto tcp from 192.168.1.184 to any port { 80,443 } keep state #设置服务器访问任何网络设备 的 80、443 端口
pass out quick proto udp from any to any port 53 keep state #设置访问 DNS 服务器
pass out quick proto udp from any to any port 67 keep state #设置访问 DHCP 服务器
pass quick inet proto icmp all icmp-type 8 code 0
pass out quick inet proto icmp from 192.168.1.184 to any icmp-type 11 code 0
pass out quick proto udp from 192.168.1.184 to any port 33434 >< 34500 保存文件,接下来在终端执行命令:
# pfctl -Fa -f /etc/pf.conf #加载规则集文件中的规则 就可以看到效果了。