/share/examples/ipfilter/ipf.conf.permissive

https://bitbucket.org/freebsd/freebsd-head/ · Unknown · 30 lines · 30 code · 0 blank · 0 comment · 0 complexity · 72e8437292d0d0a5c1d90203ff1cbf03 MD5 · raw file

  1. # $FreeBSD$
  2. # augmented rules generated by mkfilters
  3. block in log quick from any with ipopts
  4. block in log quick proto tcp from any to any with short
  5. block in log quick all with opt lsrr
  6. block in log quick all with opt ssrr
  7. #-------------------------------------------------------
  8. # loopback pakets left unmolested
  9. pass in quick on lo0 all
  10. pass out quick on lo0 all
  11. #-------------------------------------------------------
  12. pass out on ed1 all head 150
  13. block out from 127.0.0.0/8 to any group 150
  14. block out from any to 127.0.0.0/8 group 150
  15. block out from any to 192.168.1.110/32 group 150
  16. #-------------------------------------------------------
  17. pass in on ed1 all head 100
  18. block in from 127.0.0.0/8 to any group 100
  19. block in from 192.168.1.110/32 to any group 100
  20. block in from 192.168.0.1/24 to any group 100
  21. #-------------------------------------------------------
  22. pass out on fxp0 all head 250
  23. block out from 127.0.0.0/8 to any group 250
  24. block out from any to 127.0.0.0/8 group 250
  25. block out from any to 192.168.0.1/32 group 250
  26. #-------------------------------------------------------
  27. pass in on fxp0 all head 200
  28. block in from 127.0.0.0/8 to any group 200
  29. block in from 192.168.0.1/32 to any group 200
  30. block in from 192.168.1.110/24 to any group 200