Copy head@r302406 to stable/11 as part of the 11.0-RELEASE cycle.Prune svn:mergeinfo from the new branch, as nothing has been mergedhere.Additional commits post-branch will follow.Approved by: re (implicit)Sponsored by: The FreeBSD Foundation
Suggest setting gateway_enable="YES" instead of sysctl net.inet.ip.forwarding=1 to enable packet forwarding.Reviewed by: glebius
Add the 'inet' keyword after the nat rule to avoid interfering withIPv6.
Update the icmp example to show allowing only the safe types.Suggested by: Tom Judge <tom at tomjudge.com>MFC after: 3 days
If the pf.conf(5) example file is copied when setting up a firewall it'seasy to forget about icmp. Update the file to show allowing icmp throughthe firewall.PR: docs/144986MFC after: 1 month
Update pf examples from OpenBSD to catch up with new stateful defaults andother syntax changes. Move pf.conf from /etc to examples, too.