1
mirror of https://git.dn42.dev/wiki/wiki.git synced 2024-11-23 07:43:29 +01:00

howto/OpenBGPD: pf: allow runtime modification of the dn42 tables

Changing them without reloading the firewall can be useful,
esp. in the <dn42peers> case.
This commit is contained in:
Štěpán Němec 2024-09-26 22:36:32 +02:00
parent 73cb9e8367
commit a9ad540bd3

View File

@ -78,8 +78,8 @@ up
```conf
pass in quick proto {icmp icmp6} max-pkt-rate 30/3
dn42_self = <YOUR-ROUTER-DN42-IPv4>
table <dn42etc> const {172.20/14 172.31/16 10/8 fd00::/8}
table <dn42peers> const {<PEER1-IPv4> fe80::/64}
table <dn42etc> {172.20/14 172.31/16 10/8 fd00::/8}
table <dn42peers> {<PEER1-IPv4> fe80::/64}
pass in quick on egress proto udp to port 21234
pass out quick on my_dn proto tcp to <dn42peers> port bgp !received-on any
pass in quick on my_dn proto tcp from <dn42peers> \