I am currently trying to get familiar with the basics of PF on FreeBSD.I am trying to setup the most basic example from the PF chapter in the FreeBSD handbook, the simple bruteforce rules:block quick from <bruteforce>pass inet proto tcp from any to $localnet port $tcp_services \    flags S/SA keep state \    (max-src-conn 100, max-src-conn-rate 15/5, \    overload <bruteforce> flush global)What is the difference between this, and only setting it up as follows:block quick from <bruteforce>pass quick proto tcp to port $tcp_services \    flags S/SA keep state \    (max-src-conn 100, max-src-conn-rate 15/5, \    overload <bruteforce> flush global)While doing this I was going to setup $localnet, which in this example is done like this:ext_if = xl0  # macro for external interface - use tun0 for PPPoEint_if = xl1  # macro for internal interfacelocalnet = $int_if:networkWhich brought to surface that I lack some fundamental understanding of how to differentiate between external and internal interface.In my case if I run ifconfig, I get vtnet0, lo0 and pflog0.So I do not have 2 interfaces like the example, and my system is not set up as a firewall between the internet and my local network.If I only got one interface, is this my external, or internal? How would I use the example from the docs in my case?
Set $ext_if, $int_if, $localnet in PF
networking;security;freebsd;firewall;pf