From 8e386dac954408cc64d1d0715d73dec7905f5771 Mon Sep 17 00:00:00 2001
From: Cullum Smith <cullum@sacredheartsc.com>
Date: Sat, 3 Aug 2024 08:24:04 -0400
Subject: add usb tethering to laptop hostclass

---
 files/etc/pf.conf.freebsd | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

(limited to 'files/etc')

diff --git a/files/etc/pf.conf.freebsd b/files/etc/pf.conf.freebsd
index 633f3ef..e01f49d 100644
--- a/files/etc/pf.conf.freebsd
+++ b/files/etc/pf.conf.freebsd
@@ -1,4 +1,8 @@
-egress = "${BOXCONF_DEFAULT_INTERFACE}"
+$(if [ -n "${pf_egress_interfaces:-}" ]; then
+    printf 'egress = "{ %s }"\n' "$(join ', ' $pf_egress_interfaces)"
+  else
+    printf 'egress = "%s"\n' "$BOXCONF_DEFAULT_INTERFACE"
+  fi)
 allowed_tcp_ports = "{ $(join ', ' ${allowed_tcp_ports:-}) }"
 allowed_udp_ports = "{ $(join ', ' ${allowed_udp_ports:-}) }"
 acme_standalone_port = ${acme_standalone_port}
@@ -7,6 +11,9 @@ nfscbd_port = ${nfscbd_port}
 
 set block-policy return
 set skip on lo
+$([ -n "${pf_skip_interfaces:-}" ] && printf \
+  'set skip on %s\n' $pf_skip_interfaces)
+
 scrub in on \$egress all fragment reassemble no-df
 
 $([ "${acme_standalone:-}" = true ] && echo \
-- 
cgit v1.2.3