14 lines
425 B
Groff
14 lines
425 B
Groff
|
# $NetBSD: example.7,v 1.1.1.1 1999/12/11 22:24:12 veego Exp $
|
||
|
|
# block all ICMP packets.
|
||
|
|
#
|
||
|
|
block in proto icmp all
|
||
|
|
#
|
||
|
|
# allow in ICMP echos and echo-replies.
|
||
|
|
#
|
||
|
|
pass in on le1 proto icmp from any to any icmp-type echo
|
||
|
|
pass in on le1 proto icmp from any to any icmp-type echorep
|
||
|
|
#
|
||
|
|
# block all ICMP destination unreachable packets which are port-unreachables
|
||
|
|
#
|
||
|
|
block in on le1 proto icmp from any to any icmp-type unreach code 3
|