[src/trunk]: src/external/bsd/blacklist/etc Add npf.conf example

[christos <christos%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/1ad63bf35935
branches:  trunk
changeset: 335841:1ad63bf35935
user:      christos <christos%NetBSD.org@localhost>
date:      Mon Jan 26 00:18:40 2015 +0000

description:
Add npf.conf example

diffstat:

 external/bsd/blacklist/etc/Makefile |   4 ++--
 external/bsd/blacklist/etc/npf.conf |  15 +++++++++++++++
 2 files changed, 17 insertions(+), 2 deletions(-)

diffs (35 lines):

diff -r d31e80fa22b2 -r 1ad63bf35935 external/bsd/blacklist/etc/Makefile
--- a/external/bsd/blacklist/etc/Makefile       Sun Jan 25 23:15:56 2015 +0000
+++ b/external/bsd/blacklist/etc/Makefile       Mon Jan 26 00:18:40 2015 +0000
@@ -1,10 +1,10 @@
-#      $NetBSD: Makefile,v 1.2 2015/01/23 21:33:50 christos Exp $
+#      $NetBSD: Makefile,v 1.3 2015/01/26 00:18:40 christos Exp $
 
 SUBDIR=rc.d
 
 FILESDIR=               /usr/share/examples/blacklist
 FILESMODE=    644
-FILES= blacklistd.conf
+FILES= blacklistd.conf npf.conf
 
 .include <bsd.files.mk>
 .include <bsd.subdir.mk>
diff -r d31e80fa22b2 -r 1ad63bf35935 external/bsd/blacklist/etc/npf.conf
--- /dev/null   Thu Jan 01 00:00:00 1970 +0000
+++ b/external/bsd/blacklist/etc/npf.conf       Mon Jan 26 00:18:40 2015 +0000
@@ -0,0 +1,15 @@
+# Transparent firewall example for blacklistd
+
+$ext_if = "bnx0"
+
+set bpf.jit on;
+alg "icmp"
+
+group "external" on $ext_if {
+       ruleset "blacklistd"
+       pass final all
+}
+
+group default {
+       pass final all
+}