src/share/ipf/example.15 - view

Return to example.15 CVS log

Up to [local] / src / share / ipf

File: [local] / src / share / ipf / Attic / example.15 (download)

Revision 1.2, Mon Jan 17 17:40:27 2000 UTC (24 years, 5 months ago) by kjell
Branch: MAIN
CVS Tags: OPENBSD_2_9_BASE, OPENBSD_2_9, OPENBSD_2_8_BASE, OPENBSD_2_8, OPENBSD_2_7_BASE, OPENBSD_2_7
Changes since 1.1: +2 -2 lines

Update the examples to those included with ipf 3.3.6. Add several new ones.

#
# For a network server, which has two interfaces, 128.1.40.1 (le0) and
# 128.1.2.1 (le1), we want to block all IP spoofing attacks.  le1 is
# connected to the majority of the network, whilst le0 is connected to a
# leaf subnet.  We're not concerned about filtering individual services
# or 
#
pass in quick on le0 from 128.1.40.0/24 to any
block in log quick on le0 from any to any
block in log quick on le1 from 128.1.1.0/24 to any
pass in quick on le1 from any to any