diff --git a/roles/pf/templates/pf.conf.gw_dna.j2 b/roles/pf/templates/pf.conf.gw_dna.j2 index b4cc151..1cfcf2b 100644 --- a/roles/pf/templates/pf.conf.gw_dna.j2 +++ b/roles/pf/templates/pf.conf.gw_dna.j2 @@ -77,7 +77,7 @@ pass out quick on $int_if from self to any pass out quick on $int_if from any to $int_net {% if intdomain == 'iot.foo.sh' %} -# block ip's 50-100 from iot network +# block ip's: 192-255 from iot network block in quick on $int_if from 172.20.27.192/26 to !$int_net {% endif %}