Restrict outbound traffic to external interface.

This commit is contained in:
Ryan Petrello
2014-05-01 13:18:12 -04:00
parent 4a5c682846
commit 6ca3e2741e
2 changed files with 13 additions and 11 deletions

View File

@@ -688,7 +688,9 @@ def _format_ext_rule(interface):
(name, defaults.DNS))
)
retval.append('pass out quick on %s proto tcp to any' % name)
retval.append(
'pass out quick on %s proto tcp from %s to any' % (name, name)
)
return retval