{"id":16238545,"url":"https://github.com/trombik/ansible-role-pf","last_synced_at":"2026-04-09T21:08:34.101Z","repository":{"id":143058771,"uuid":"112696114","full_name":"trombik/ansible-role-pf","owner":"trombik","description":"Configure pf","archived":false,"fork":false,"pushed_at":"2020-04-19T03:21:19.000Z","size":28,"stargazers_count":1,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"master","last_synced_at":"2025-04-08T09:14:16.230Z","etag":null,"topics":["ansible","ansible-role","openbsd","pf"],"latest_commit_sha":null,"homepage":null,"language":"Ruby","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"isc","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/trombik.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2017-12-01T04:47:53.000Z","updated_at":"2023-12-28T19:16:53.000Z","dependencies_parsed_at":"2023-04-13T04:00:54.797Z","dependency_job_id":null,"html_url":"https://github.com/trombik/ansible-role-pf","commit_stats":null,"previous_names":[],"tags_count":3,"template":false,"template_full_name":null,"purl":"pkg:github/trombik/ansible-role-pf","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/trombik%2Fansible-role-pf","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/trombik%2Fansible-role-pf/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/trombik%2Fansible-role-pf/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/trombik%2Fansible-role-pf/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/trombik","download_url":"https://codeload.github.com/trombik/ansible-role-pf/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/trombik%2Fansible-role-pf/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":260442507,"owners_count":23009846,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["ansible","ansible-role","openbsd","pf"],"created_at":"2024-10-10T13:40:43.038Z","updated_at":"2026-04-09T21:08:34.072Z","avatar_url":"https://github.com/trombik.png","language":"Ruby","funding_links":[],"categories":[],"sub_categories":[],"readme":"# ansible-role-pf\n\nConfigure pf firewall\n\n# Requirements\n\nNone\n\n# Role Variables\n\n| Variable | Description | Default |\n|----------|-------------|---------|\n| `pf_conf` | path to `pf.conf(5)` | `/etc/pf.conf` |\n| `pf_conf_dir` | directory where additional `pf.conf(5)` fragments can be placed. the role does not do anything with it but create the directory.| `/etc/pf.conf.d` |\n| `pf_rule` | see below | |\n\n## `pf_rule`\n\nBy default, the following `pf(4)` rules are created.\n\n* skip on lo\n* block everything by default\n* pass all icmp and ssh to the host\n* pass all from the host to any\n\nThe default value of `pf_rule` is:\n\n```\nset skip on { lo }\nblock log all\npass in  proto icmp from any to any\npass in  proto tcp from any to any port 22\npass out on egress from (egress) to any\n```\n# Dependencies\n\nNone\n\n# Example Playbook\n\n```yaml\n- hosts: localhost\n  roles:\n    - ansible-role-pf\n  vars:\n    pf_rule: |\n      set skip on lo\n\n      block return    # block stateless traffic\n      pass            # establish keep-state\n\n      # By default, do not permit remote connections to X11\n      block return in on ! lo0 proto tcp to port 6000:6010\n```\n\n# License\n\n```\nCopyright (c) 2016 Tomoyuki Sakurai \u003ctomoyukis@reallyenglish.com\u003e\n\nPermission to use, copy, modify, and distribute this software for any\npurpose with or without fee is hereby granted, provided that the above\ncopyright notice and this permission notice appear in all copies.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\" AND THE AUTHOR DISCLAIMS ALL WARRANTIES\nWITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF\nMERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR\nANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES\nWHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN\nACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF\nOR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.\n```\n\n# Author Information\n\nTomoyuki Sakurai \u003ctomoyukis@reallyenglish.com\u003e\n\nThis README was created by [ansible-role-init](https://gist.github.com/trombik/d01e280f02c78618429e334d8e4995c0)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ftrombik%2Fansible-role-pf","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Ftrombik%2Fansible-role-pf","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ftrombik%2Fansible-role-pf/lists"}