/share/examples/ipfilter/ipf.conf.permissive

https://bitbucket.org/freebsd/freebsd-head/ · Unknown · 30 lines · 30 code · 0 blank · 0 comment · 0 complexity · 72e8437292d0d0a5c1d90203ff1cbf03 MD5 · raw file 

    

  1. # $FreeBSD$
    2. 

  2. # augmented rules generated by mkfilters
    3. 

  3. block in log quick from any with ipopts
    4. 

  4. block in log quick proto tcp from any to any with short
    5. 

  5. block in log quick all with opt lsrr
    6. 

  6. block in log quick all with opt ssrr
    7. 

  7. #-------------------------------------------------------
    8. 

  8. # loopback pakets left unmolested
    9. 

  9. pass in quick on lo0 all
    10. 

  10. pass out quick on lo0 all
    11. 

  11. #-------------------------------------------------------
    12. 

  12. pass out on ed1 all head 150
    13. 

  13. block out from 127.0.0.0/8 to any group 150
    14. 

  14. block out from any to 127.0.0.0/8 group 150
    15. 

  15. block out from any to 192.168.1.110/32 group 150
    16. 

  16. #-------------------------------------------------------
    17. 

  17. pass in on ed1 all head 100
    18. 

  18. block in from 127.0.0.0/8 to any group 100
    19. 

  19. block in from 192.168.1.110/32 to any group 100
    20. 

  20. block in from 192.168.0.1/24 to any group 100
    21. 

  21. #-------------------------------------------------------
    22. 

  22. pass  out on fxp0 all head 250
    23. 

  23. block out from 127.0.0.0/8 to any group 250
    24. 

  24. block out from any to 127.0.0.0/8 group 250
    25. 

  25. block out from any to 192.168.0.1/32 group 250
    26. 

  26. #-------------------------------------------------------
    27. 

  27. pass in on fxp0 all head 200
    28. 

  28. block in from 127.0.0.0/8 to any group 200
    29. 

  29. block in from 192.168.0.1/32 to any group 200
    30. 

  30. block in from 192.168.1.110/24 to any group 200
    31.