Listing 3: Sample IPFilter configuration file
pass in quick on le0 proto icmp from any to 10.100.100.65/32 icmp-type 0
pass in quick on le0 proto icmp from any to 10.100.100.65/32 icmp-type 3
pass in quick on le0 proto icmp from any to 10.100.100.65/32 icmp-type 11
block in log level local4.info quick on le0 proto icmp from any to 10.100.100.65/32
pass in quick on le0 proto tcp from any to 10.100.100.65/32 port = 22 flags S keep state
pass in quick on le0 proto tcp from any to 10.100.100.65/32 port = 443 flags S keep state
pass in quick on le0 proto udp from any port = 161 to 10.100.100.65/32 keep state
pass in quick on le0 proto udp from any to 10.100.100.65/32 port = 162 keep state
pass in quick on le0 proto udp from any port = 53 to 10.100.100.65/32 keep state pass \
in quick on le0 proto udp from any to 10.100.100.65/32 port = 514 keep state
pass out quick on le0 proto tcp from 10.100.100.65/32 to any keep state
pass out quick on lo0
pass in quick on lo0
block in on le0 all
|