b9daf172a0
GSoC 2008 project. These were originally inside the kernel subdirectory but I think they belong in their own top-level directory because ipf consists of more components than just the kernel-level packet filter.
19 lines
646 B
Plaintext
19 lines
646 B
Plaintext
pass in all
|
|
block out \
|
|
all
|
|
log in all
|
|
log body in all
|
|
count in from any to any
|
|
pass in from !any to any pps 10
|
|
block in from any to !any
|
|
pass in on ed0 from localhost to localhost
|
|
pass in on ed0,vx0 from localhost to localhost
|
|
block in log first on lo0 from any to any
|
|
pass in log body or-block quick from any to any
|
|
block return-rst in quick on le0 proto tcp from any to any
|
|
block return-icmp in on qe0 from any to any
|
|
block return-icmp(1) in on qe0 from any to any
|
|
block return-icmp-as-dest in on le0 from any to any
|
|
block return-icmp-as-dest(port-unr) in on qe0 from any to any
|
|
pass out on longNICname0 from test.host.dots to test\.host.dots
|