summaryrefslogtreecommitdiffstats
path: root/usr/local
diff options
context:
space:
mode:
authorScott Ullrich <sullrich@pfsense.org>2005-12-24 02:36:36 +0000
committerScott Ullrich <sullrich@pfsense.org>2005-12-24 02:36:36 +0000
commitca07f23220817b323e23bdd5e7b3d6854a2da3a6 (patch)
tree0c4f4b12f068ccb119d755d73b0e7e449398cbb1 /usr/local
parentfcb0a4246f3b493621715ce0c3a0659f5237a4f9 (diff)
downloadpfsense-ca07f23220817b323e23bdd5e7b3d6854a2da3a6.zip
pfsense-ca07f23220817b323e23bdd5e7b3d6854a2da3a6.tar.gz
Add block bogons to setup wizard
Diffstat (limited to 'usr/local')
-rw-r--r--usr/local/www/wizards/setup_wizard.xml12
1 files changed, 12 insertions, 0 deletions
diff --git a/usr/local/www/wizards/setup_wizard.xml b/usr/local/www/wizards/setup_wizard.xml
index f4a385e..495e046 100644
--- a/usr/local/www/wizards/setup_wizard.xml
+++ b/usr/local/www/wizards/setup_wizard.xml
@@ -378,6 +378,18 @@
<typehint>Block private networks from entering via WAN</typehint>
</field>
<field>
+ <name>Block bogon networks</name>
+ <type>listtopic</type>
+ </field>
+ <field>
+ <donotdisable>true</donotdisable>
+ <name>Block bogon networks</name>
+ <description>Block bogon networks When set, this option blocks traffic from IP addresses that are reserved (but not RFC 1918) or not yet assigned by IANA. Bogons are prefixes that should never appear in the Internet routing table, and obviously should not appear as the source address in any packets you receive.When set, this option blocks traffic from IP addresses that are reserved for private networks as per RFC 1918 (10/8, 172.16/12, 192.168/16) as well as loopback addresses (127/8). You should generally leave this option turned on, unless your WAN network lies in such a private address space, too.</description>
+ <type>checkbox</type>
+ <bindstofield>interfaces->wan->blockbogons</bindstofield>
+ <typehint>Block bogon networks When set, this option blocks traffic from IP addresses that are reserved (but not RFC 1918) or not yet assigned by IANA. Bogons are prefixes that should never appear in the Internet routing table, and obviously should not appear as the source address in any packets you receive.When set, this option blocks traffic from IP addresses that are reserved for private networks as per RFC 1918 (10/8, 172.16/12, 192.168/16) as well as loopback addresses (127/8). You should generally leave this option turned on, unless your WAN network lies in such a private address space, too.</typehint>
+ </field>
+ <field>
<name>Next</name>
<type>submit</type>
</field>
OpenPOWER on IntegriCloud