Home | History | Annotate | Line # | Download | only in rules 
      1 #	$NetBSD: example.10,v 1.1.1.1 2012/03/23 21:20:15 christos Exp $
      2 #
      3 # pass ack packets (ie established connection)
      4 #
      5 pass in proto tcp from 10.1.0.0/16 port = 23 to 10.2.0.0/16 flags A/A
      6 pass out proto tcp from 10.1.0.0/16 port = 23 to 10.2.0.0/16 flags A/A
      7 #
      8 # block incoming connection requests to my internal network from the big bad
      9 # internet.
     10 #
     11 block in on le0 proto tcp from any to 10.1.0.0/16 flags S/SA
     12 #  to block the replies:
     13 block out on le0 proto tcp from 10.1.0.0 to any flags SA/SA
     14