NetBSD/usr.sbin/ipf/rules/example.10

13 lines
431 B
Plaintext
Raw Normal View History

1997-09-21 20:47:50 +04:00
#
# pass ack packets (ie established connection)
#
1997-10-30 08:27:24 +03:00
pass in proto tcp from 10.1.0.0/16 port = 23 to 10.2.0.0/16 flags A/A
pass out proto tcp from 10.1.0.0/16 port = 23 to 10.2.0.0/16 flags A/A
1997-09-21 20:47:50 +04:00
#
# block incoming connection requests to my internal network from the big bad
# internet.
#
block in on le0 proto tcp from any to 10.1.0.0/16 flags S/SA
# to block the replies:
block out on le0 proto tcp from 10.1.0.0 to any flags SA/SA