Home | History | Annotate | Line # | Download | only in rules
      1 #	$NetBSD: example.3,v 1.1.1.1 2012/03/23 21:20:15 christos Exp $
      2 #
      3 # block all inbound packets.
      4 #
      5 block in from any to any
      6 #
      7 # pass through packets to and from localhost.
      8 #
      9 pass in from 127.0.0.1/32 to 127.0.0.1/32
     10 #
     11 # allow a variety of individual hosts to send any type of IP packet to any
     12 # other host.
     13 #
     14 pass in from 10.1.3.1/32 to any
     15 pass in from 10.1.3.2/32 to any
     16 pass in from 10.1.3.3/32 to any
     17 pass in from 10.1.3.4/32 to any
     18 pass in from 10.1.3.5/32 to any
     19 pass in from 10.1.0.13/32 to any
     20 pass in from 10.1.1.1/32 to any
     21 pass in from 10.1.2.1/32 to any
     22 #
     23 #
     24 # block all outbound packets.
     25 #
     26 block out from any to any
     27 #
     28 # allow any packets destined for localhost out.
     29 #
     30 pass out from any to 127.0.0.1/32
     31 #
     32 # allow any host to send any IP packet out to a limited number of hosts.
     33 #
     34 pass out from any to 10.1.3.1/32
     35 pass out from any to 10.1.3.2/32
     36 pass out from any to 10.1.3.3/32
     37 pass out from any to 10.1.3.4/32
     38 pass out from any to 10.1.3.5/32
     39 pass out from any to 10.1.0.13/32
     40 pass out from any to 10.1.1.1/32
     41 pass out from any to 10.1.2.1/32
     42