Cover V09, I13
Article
Listing 1
Listing 2
Listing 3
Listing 4
Listing 5

nov_sup2000.tar


Listing 3: Sample IPFilter configuration file

pass in quick on le0 proto icmp from any to 10.100.100.65/32 icmp-type 0 
pass in quick on le0 proto icmp from any to 10.100.100.65/32 icmp-type 3 
pass in quick on le0 proto icmp from any to 10.100.100.65/32 icmp-type 11 
block in log level local4.info quick on le0 proto icmp from any to 10.100.100.65/32 
pass in quick on le0 proto tcp from any to 10.100.100.65/32 port = 22 flags S keep state 
pass in quick on le0 proto tcp from any to 10.100.100.65/32 port = 443 flags S keep state 
pass in quick on le0 proto udp from any port = 161 to 10.100.100.65/32 keep state 
pass in quick on le0 proto udp from any to 10.100.100.65/32 port = 162 keep state 
pass in quick on le0 proto udp from any port = 53 to 10.100.100.65/32 keep state pass   \
   in quick on le0 proto udp from any to 10.100.100.65/32 port = 514 keep state 
pass out quick on le0 proto tcp from 10.100.100.65/32 to any keep state 
pass out quick on lo0 
pass in quick on lo0 
block in on le0 all