mirror of
https://github.com/Stichting-MINIX-Research-Foundation/netbsd.git
synced 2025-09-13 00:57:28 -04:00
14 lines
498 B
Plaintext
14 lines
498 B
Plaintext
# $NetBSD: example.10,v 1.1.1.1 2012/03/23 21:20:15 christos Exp $
|
|
#
|
|
# pass ack packets (ie established connection)
|
|
#
|
|
pass in proto tcp from 10.1.0.0/16 port = 23 to 10.2.0.0/16 flags A/A
|
|
pass out proto tcp from 10.1.0.0/16 port = 23 to 10.2.0.0/16 flags A/A
|
|
#
|
|
# block incoming connection requests to my internal network from the big bad
|
|
# internet.
|
|
#
|
|
block in on le0 proto tcp from any to 10.1.0.0/16 flags S/SA
|
|
# to block the replies:
|
|
block out on le0 proto tcp from 10.1.0.0 to any flags SA/SA
|