Merge pull request #8 from vedetta-com/wip

Clean pf.conf; Change README.md

README.md

@@ -1,10 +1,13 @@
-# vedetta
+# vedetta (alpha)
 *Open*BSD Router Boilerplate
 
 ## About
 > an opinionated, best practice, vanilla OpenBSD base configuration for bare-metal, or cloud routers
 
+What would an OpenBSD router configured using examples from the OpenBSD FAQ and Manual pages look like?
+
 ## Features
+Share what you've got, keep what you need:
 * acme-client
 * authpf
 * dhclient

src/etc/pf.conf

@@ -92,11 +92,11 @@ match out log on egress inet6 proto tcp \
  tagged LAN6_INET6
 
 match out log on egress inet proto tcp \
- to port { ssh 2882 2442 } \
+ to port ssh \
  set queue (ssh_bulk, ssh_interactive) \
  tagged LAN_INET
 match out log on egress inet6 proto tcp \
- to port { ssh 2882 2442 } \
+ to port ssh \
  set queue (ssh_bulk, ssh_interactive) \
  tagged LAN6_INET6
 
@@ -311,6 +311,14 @@ pass out log on { enc tun } inet \
  keep state (if-bound) \
  set prio (5, 6) # default prio 3
 
+pass out log on { lan wlan vether } inet6 \
+ from (self) to (self:network) \
+ set prio (5, 6) # default prio 3
+pass out log on { enc tun } inet6 \
+ from (self) to (self:network) \
+ keep state (if-bound) \
+ set prio (5, 6) # default prio 3
+
 # and guests
 
 # www to LAN[6]_INET[6]