diff options
author | Scott Ullrich <sullrich@pfsense.org> | 2005-12-24 02:36:36 +0000 |
---|---|---|
committer | Scott Ullrich <sullrich@pfsense.org> | 2005-12-24 02:36:36 +0000 |
commit | ca07f23220817b323e23bdd5e7b3d6854a2da3a6 (patch) | |
tree | 0c4f4b12f068ccb119d755d73b0e7e449398cbb1 /usr/local | |
parent | fcb0a4246f3b493621715ce0c3a0659f5237a4f9 (diff) | |
download | pfsense-ca07f23220817b323e23bdd5e7b3d6854a2da3a6.zip pfsense-ca07f23220817b323e23bdd5e7b3d6854a2da3a6.tar.gz |
Add block bogons to setup wizard
Diffstat (limited to 'usr/local')
-rw-r--r-- | usr/local/www/wizards/setup_wizard.xml | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/usr/local/www/wizards/setup_wizard.xml b/usr/local/www/wizards/setup_wizard.xml index f4a385e..495e046 100644 --- a/usr/local/www/wizards/setup_wizard.xml +++ b/usr/local/www/wizards/setup_wizard.xml @@ -378,6 +378,18 @@ <typehint>Block private networks from entering via WAN</typehint> </field> <field> + <name>Block bogon networks</name> + <type>listtopic</type> + </field> + <field> + <donotdisable>true</donotdisable> + <name>Block bogon networks</name> + <description>Block bogon networks When set, this option blocks traffic from IP addresses that are reserved (but not RFC 1918) or not yet assigned by IANA. Bogons are prefixes that should never appear in the Internet routing table, and obviously should not appear as the source address in any packets you receive.When set, this option blocks traffic from IP addresses that are reserved for private networks as per RFC 1918 (10/8, 172.16/12, 192.168/16) as well as loopback addresses (127/8). You should generally leave this option turned on, unless your WAN network lies in such a private address space, too.</description> + <type>checkbox</type> + <bindstofield>interfaces->wan->blockbogons</bindstofield> + <typehint>Block bogon networks When set, this option blocks traffic from IP addresses that are reserved (but not RFC 1918) or not yet assigned by IANA. Bogons are prefixes that should never appear in the Internet routing table, and obviously should not appear as the source address in any packets you receive.When set, this option blocks traffic from IP addresses that are reserved for private networks as per RFC 1918 (10/8, 172.16/12, 192.168/16) as well as loopback addresses (127/8). You should generally leave this option turned on, unless your WAN network lies in such a private address space, too.</typehint> + </field> + <field> <name>Next</name> <type>submit</type> </field> |