Annotation of src/share/ipf/example.3, Revision 1.1
1.1 ! dm 1: #
! 2: # block all inbound packets.
! 3: #
! 4: block in from any to any
! 5: #
! 6: # pass through packets to and from localhost.
! 7: #
! 8: pass in from 127.0.0.1/32 to 127.0.0.1/32
! 9: #
! 10: # allow a variety of individual hosts to send any type of IP packet to any
! 11: # other host.
! 12: #
! 13: pass in from 10.1.3.1/32 to any
! 14: pass in from 10.1.3.2/32 to any
! 15: pass in from 10.1.3.3/32 to any
! 16: pass in from 10.1.3.4/32 to any
! 17: pass in from 10.1.3.5/32 to any
! 18: pass in from 10.1.0.13/32 to any
! 19: pass in from 10.1.1.1/32 to any
! 20: pass in from 10.1.2.1/32 to any
! 21: #
! 22: #
! 23: # block all outbound packets.
! 24: #
! 25: block out from any to any
! 26: #
! 27: # allow any packets destined for localhost out.
! 28: #
! 29: pass out from any to 127.0.0.1/32
! 30: #
! 31: # allow any host to send any IP packet out to a limited number of hosts.
! 32: #
! 33: pass out from any to 10.1.3.1/32
! 34: pass out from any to 10.1.3.2/32
! 35: pass out from any to 10.1.3.3/32
! 36: pass out from any to 10.1.3.4/32
! 37: pass out from any to 10.1.3.5/32
! 38: pass out from any to 10.1.0.13/32
! 39: pass out from any to 10.1.1.1/32
! 40: pass out from any to 10.1.2.1/32