mirror of
https://github.com/fwbuilder/fwbuilder
synced 2026-03-19 17:57:22 +01:00
74 lines
3.8 KiB
Plaintext
Executable File
74 lines
3.8 KiB
Plaintext
Executable File
#
|
|
# Rule 0 (global)
|
|
pass in quick proto icmp from any to 192.168.1.1 keep state
|
|
pass in quick proto icmp from any to 192.168.1.2 keep state
|
|
pass in quick proto icmp from any to 192.168.1.3/30 keep state
|
|
pass in quick proto icmp from any to 192.168.1.200 keep state
|
|
pass in quick proto icmp from any to 192.168.1.201 keep state
|
|
pass in quick proto icmp from any to 192.168.2.128/25 keep state
|
|
pass in quick proto tcp from any to 192.168.1.1 keep state
|
|
pass in quick proto tcp from any to 192.168.1.2 keep state
|
|
pass in quick proto tcp from any to 192.168.1.3/30 keep state
|
|
pass in quick proto tcp from any to 192.168.1.200 keep state
|
|
pass in quick proto tcp from any to 192.168.1.201 keep state
|
|
pass in quick proto tcp from any to 192.168.2.128/25 keep state
|
|
pass in quick proto udp from any to 192.168.1.1 keep state
|
|
pass in quick proto udp from any to 192.168.1.2 keep state
|
|
pass in quick proto udp from any to 192.168.1.3/30 keep state
|
|
pass in quick proto udp from any to 192.168.1.200 keep state
|
|
pass in quick proto udp from any to 192.168.1.201 keep state
|
|
pass in quick proto udp from any to 192.168.2.128/25 keep state
|
|
pass in quick from any to 192.168.1.1
|
|
pass in quick from any to 192.168.1.2
|
|
pass in quick from any to 192.168.1.3/30
|
|
pass in quick from any to 192.168.1.200
|
|
pass in quick from any to 192.168.1.201
|
|
pass in quick from any to 192.168.2.128/25
|
|
pass out quick proto icmp from any to 192.168.1.1 keep state
|
|
pass out quick proto icmp from any to 192.168.1.2 keep state
|
|
pass out quick proto icmp from any to 192.168.1.3/30 keep state
|
|
pass out quick proto icmp from any to 192.168.1.200 keep state
|
|
pass out quick proto icmp from any to 192.168.1.201 keep state
|
|
pass out quick proto icmp from any to 192.168.2.128/25 keep state
|
|
pass out quick proto tcp from any to 192.168.1.1 keep state
|
|
pass out quick proto tcp from any to 192.168.1.2 keep state
|
|
pass out quick proto tcp from any to 192.168.1.3/30 keep state
|
|
pass out quick proto tcp from any to 192.168.1.200 keep state
|
|
pass out quick proto tcp from any to 192.168.1.201 keep state
|
|
pass out quick proto tcp from any to 192.168.2.128/25 keep state
|
|
pass out quick proto udp from any to 192.168.1.1 keep state
|
|
pass out quick proto udp from any to 192.168.1.2 keep state
|
|
pass out quick proto udp from any to 192.168.1.3/30 keep state
|
|
pass out quick proto udp from any to 192.168.1.200 keep state
|
|
pass out quick proto udp from any to 192.168.1.201 keep state
|
|
pass out quick proto udp from any to 192.168.2.128/25 keep state
|
|
pass out quick from any to 192.168.1.1
|
|
pass out quick from any to 192.168.1.2
|
|
pass out quick from any to 192.168.1.3/30
|
|
pass out quick from any to 192.168.1.200
|
|
pass out quick from any to 192.168.1.201
|
|
pass out quick from any to 192.168.2.128/25
|
|
#
|
|
# Rule 7 (global)
|
|
pass in quick proto tcp from any to 192.168.1.10 port = 25 keep state
|
|
pass out quick proto tcp from any to 192.168.1.10 port = 25 keep state
|
|
#
|
|
# Rule 8 (global)
|
|
pass in quick proto icmp from 192.168.1.0/24 to any keep state
|
|
pass in quick proto tcp from 192.168.1.0/24 to any keep state
|
|
pass in quick proto udp from 192.168.1.0/24 to any keep state
|
|
pass in quick from 192.168.1.0/24 to any
|
|
pass out quick proto icmp from 192.168.1.0/24 to any keep state
|
|
pass out quick proto tcp from 192.168.1.0/24 to any keep state
|
|
pass out quick proto udp from 192.168.1.0/24 to any keep state
|
|
pass out quick from 192.168.1.0/24 to any
|
|
#
|
|
# Rule 9 (global)
|
|
block in log quick from any to any
|
|
block out log quick from any to any
|
|
#
|
|
# Rule fallback rule
|
|
# fallback rule
|
|
block in quick from any to any
|
|
block out quick from any to any
|