[BACK]Return to example.3 CVS log [TXT][DIR] Up to [local] / src / share / ipf

Annotation of src/share/ipf/example.3, Revision 1.1

1.1     ! dm          1: #
        !             2: # block all inbound packets.
        !             3: #
        !             4: block in from any to any
        !             5: #
        !             6: # pass through packets to and from localhost.
        !             7: #
        !             8: pass in from 127.0.0.1/32 to 127.0.0.1/32
        !             9: #
        !            10: # allow a variety of individual hosts to send any type of IP packet to any
        !            11: # other host.
        !            12: #
        !            13: pass in from 10.1.3.1/32 to any
        !            14: pass in from 10.1.3.2/32 to any
        !            15: pass in from 10.1.3.3/32 to any
        !            16: pass in from 10.1.3.4/32 to any
        !            17: pass in from 10.1.3.5/32 to any
        !            18: pass in from 10.1.0.13/32 to any
        !            19: pass in from 10.1.1.1/32 to any
        !            20: pass in from 10.1.2.1/32 to any
        !            21: #
        !            22: #
        !            23: # block all outbound packets.
        !            24: #
        !            25: block out from any to any
        !            26: #
        !            27: # allow any packets destined for localhost out.
        !            28: #
        !            29: pass out from any to 127.0.0.1/32
        !            30: #
        !            31: # allow any host to send any IP packet out to a limited number of hosts.
        !            32: #
        !            33: pass out from any to 10.1.3.1/32
        !            34: pass out from any to 10.1.3.2/32
        !            35: pass out from any to 10.1.3.3/32
        !            36: pass out from any to 10.1.3.4/32
        !            37: pass out from any to 10.1.3.5/32
        !            38: pass out from any to 10.1.0.13/32
        !            39: pass out from any to 10.1.1.1/32
        !            40: pass out from any to 10.1.2.1/32