From 4d51c591c1f3ce39b407d85c2f14ce3a132360fb Mon Sep 17 00:00:00 2001
From: sebres <serg.brester@sebres.de>
Date: Thu, 19 May 2016 14:50:41 +0200
Subject: [PATCH] pf.conf: warranted consistently echoing for the pf actiontype
 if actiontype or multiport tags will be customized;

---
 config/action.d/pf.conf | 14 ++++++++++----
 1 file changed, 10 insertions(+), 4 deletions(-)

diff --git a/config/action.d/pf.conf b/config/action.d/pf.conf
index 5710eb8e..ea70d894 100644
--- a/config/action.d/pf.conf
+++ b/config/action.d/pf.conf
@@ -16,7 +16,7 @@
 # we don't enable PF automatically; to enable run pfctl -e 
 # or add `pf_enable="YES"` to /etc/rc.conf (tested on FreeBSD)
 actionstart = echo "table <<tablename>-<name>> persist counters" | pfctl -f- 
-              echo "block proto <protocol> from <<tablename>-<name>> to any<actiontype>" | pfctl -f-
+              echo "block proto <protocol> from <<tablename>-<name>> to <actiontype>" | pfctl -f-
 
 
 # Option:  actionstop
@@ -76,14 +76,20 @@ protocol = tcp
 # Notes.:  specifies port to monitor
 # Values:  [ NUM | STRING ]  Default:
 #
-port = telnet
+#port = telnet
 
 # Option: actiontype
 # Notes.: defines additions to the blocking rule
 # Values: leave empty to block all attempts from the host
-actiontype = 
+# Default: Value of the allports
+actiontype = any
+
+# Option: allports
+# Notes.: default addition to block all ports
+# Usage.: use in jail config: "banaction = pf[actiontype=<allports>]"
+allports = any
 
 # Option: multiport
 # Notes.: addition to block access only to specific ports
 # Usage.: use in jail config: "banaction = pf[actiontype=<multiport>]"
-multiport = <sp>port <port>
+multiport = any port <port>