mirror of
https://github.com/fwbuilder/fwbuilder
synced 2026-03-19 17:57:22 +01:00
92 lines
4.5 KiB
Plaintext
92 lines
4.5 KiB
Plaintext
|
|
|
|
|
|
|
|
# Tables: (1)
|
|
table <tbl.r1.s> { 192.168.1.1 , 222.222.222.222 }
|
|
|
|
# Policy compiler errors and warnings:
|
|
# firewall62:Policy:1: error: Rule '1 (global)' shadows rule '2 (global)' below it
|
|
# firewall62:Policy:1: error: Rule '1 (global)' shadows rule '2 (global)' below it
|
|
# firewall62:Policy:1: error: Rule '1 (global)' shadows rule '3 (global)' below it
|
|
# firewall62:Policy:1: error: Rule '1 (global)' shadows rule '3 (global)' below it
|
|
# firewall62:Policy:1: error: Rule '1 (global)' shadows rule '4 (global)' below it
|
|
# firewall62:Policy:3: error: Rule '3 (global)' shadows rule '4 (global)' below it
|
|
# firewall62:Policy:1: error: Rule '1 (global)' shadows rule '4 (global)' below it
|
|
# firewall62:Policy:3: error: Rule '3 (global)' shadows rule '4 (global)' below it
|
|
# firewall62:Policy:1: error: Rule '1 (global)' shadows rule '5 (global)' below it
|
|
# firewall62:Policy:3: error: Rule '3 (global)' shadows rule '5 (global)' below it
|
|
# firewall62:Policy:1: error: Rule '1 (global)' shadows rule '5 (global)' below it
|
|
# firewall62:Policy:3: error: Rule '3 (global)' shadows rule '5 (global)' below it
|
|
# firewall62:Policy:1: error: Rule '1 (global)' shadows rule '6 (global)' below it
|
|
# firewall62:Policy:8: error: Rule '8 (global)' shadows rule '9 (global)' below it
|
|
# firewall62:Policy:8: error: Rule '8 (global)' shadows rule '9 (global)' below it
|
|
# firewall62:Policy:8: error: Rule '8 (global)' shadows rule '10 (global)' below it
|
|
# firewall62:Policy:8: error: Rule '8 (global)' shadows rule '10 (global)' below it
|
|
# firewall62:Policy:1: warning: Changing rule direction due to self reference
|
|
# firewall62:Policy:2: warning: Changing rule direction due to self reference
|
|
# firewall62:Policy:4: warning: Changing rule direction due to self reference
|
|
# firewall62:Policy:8: warning: Changing rule direction due to self reference
|
|
# firewall62:Policy:9: warning: Changing rule direction due to self reference
|
|
# firewall62:Policy:12: warning: Changing rule direction due to self reference
|
|
#
|
|
# Rule 0 (en0)
|
|
# rule from FR 1948872
|
|
# should generate
|
|
# pass in quick on en0 user proxy
|
|
pass in quick on en0 inet from any to any user proxy label "RULE 0 -- ACCEPT "
|
|
#
|
|
# Rule 1 (global)
|
|
# firewall62:Policy:1: warning: Changing rule direction due to self reference
|
|
pass out quick inet from <tbl.r1.s> to any user { 2000, 500 } label "RULE 1 -- ACCEPT "
|
|
#
|
|
# Rule 2 (global)
|
|
# firewall62:Policy:2: warning: Changing rule direction due to self reference
|
|
pass out quick inet from <tbl.r1.s> to any user 2000 label "RULE 2 -- ACCEPT "
|
|
#
|
|
# Rule 3 (global)
|
|
pass out quick inet proto tcp from <tbl.r1.s> to any port 80 flags any label "RULE 3 -- ACCEPT "
|
|
pass out quick inet from <tbl.r1.s> to any user 2000 label "RULE 3 -- ACCEPT "
|
|
#
|
|
# Rule 4 (global)
|
|
# firewall62:Policy:4: warning: Changing rule direction due to self reference
|
|
pass out quick inet proto tcp from <tbl.r1.s> to any port 80 flags any label "RULE 4 -- ACCEPT "
|
|
# firewall62:Policy:4: warning: Changing rule direction due to self reference
|
|
pass out quick inet from <tbl.r1.s> to any user 2000 label "RULE 4 -- ACCEPT "
|
|
#
|
|
# Rule 5 (global)
|
|
pass out quick inet proto tcp from <tbl.r1.s> to any port 80 flags any label "RULE 5 -- ACCEPT "
|
|
pass out quick inet from <tbl.r1.s> to any user 2000 label "RULE 5 -- ACCEPT "
|
|
#
|
|
# Rule 6 (global)
|
|
pass quick inet from 192.168.1.1 to any user 2000 label "RULE 6 -- ACCEPT "
|
|
#
|
|
# Rule 7 (global)
|
|
pass quick inet from 192.168.1.0/24 to any user 2000 label "RULE 7 -- ACCEPT "
|
|
#
|
|
# Rule 8 (global)
|
|
# firewall62:Policy:8: warning: Changing rule direction due to self reference
|
|
pass in quick inet from any to <tbl.r1.s> user 2000 label "RULE 8 -- ACCEPT "
|
|
#
|
|
# Rule 9 (global)
|
|
# firewall62:Policy:9: warning: Changing rule direction due to self reference
|
|
pass in quick inet from any to <tbl.r1.s> user { 2000, 500 } label "RULE 9 -- ACCEPT "
|
|
#
|
|
# Rule 10 (global)
|
|
pass in quick inet from any to <tbl.r1.s> user 2000 label "RULE 10 -- ACCEPT "
|
|
#
|
|
# Rule 11 (global)
|
|
pass quick inet from ! 192.168.1.0/24 to any user 2000 label "RULE 11 -- ACCEPT "
|
|
#
|
|
# Rule 12 (global)
|
|
# firewall62:Policy:12: warning: Changing rule direction due to self reference
|
|
pass in quick inet from any to ! <tbl.r1.s> user 2000 label "RULE 12 -- ACCEPT "
|
|
#
|
|
# Rule 13 (global)
|
|
block quick inet from any to any no state label "RULE 13 -- DROP "
|
|
#
|
|
# Rule fallback rule
|
|
# fallback rule
|
|
block quick inet from any to any no state label "RULE 10000 -- DROP "
|
|
|