src/share/ipf/example.10 - view

Return to example.10 CVS log

Up to [local] / src / share / ipf

File: [local] / src / share / ipf / Attic / example.10 (download)

Revision 1.2, Mon Jan 17 17:40:27 2000 UTC (24 years, 4 months ago) by kjell
Branch: MAIN
CVS Tags: OPENBSD_2_9_BASE, OPENBSD_2_9, OPENBSD_2_8_BASE, OPENBSD_2_8, OPENBSD_2_7_BASE, OPENBSD_2_7
Changes since 1.1: +2 -2 lines

Update the examples to those included with ipf 3.3.6. Add several new ones.

#
# pass ack packets (ie established connection)
#
pass in proto tcp from 10.1.0.0/16 port = 23 to 10.2.0.0/16 flags A/A
pass out proto tcp from 10.1.0.0/16 port = 23 to 10.2.0.0/16 flags A/A
#
# block incoming connection requests to my internal network from the big bad
# internet.
#
block in on le0 proto tcp from any to 10.1.0.0/16 flags S/SA
#  to block the replies:
block out on le0 proto tcp from 10.1.0.0 to any flags SA/SA