BSD use SYN,ACK filter to catch autottl

1 year ago · 0a0fcbf14c
1 changed files with 1 additions and 0 deletions
--- a/docs/bsd.eng.md
+++ b/docs/bsd.eng.md
@ -334,6 +334,7 @@ requires root.

 `/etc/pf.conf`:
 ```
+pass in  quick on em0 proto tcp from port {80,443} flags SA/SA divert-packet port 989 no state
 pass in  quick on em0 proto tcp from port {80,443} no state
 pass out quick on em0 proto tcp to   port {80,443} divert-packet port 989
 ```