1 1.1 christos # 2 1.1 christos # Only allow TCP packets in/out of le0 if there is an outgoing connection setup 3 1.1 christos # somewhere, waiting for it. 4 1.1 christos # 5 1.1 christos pass out quick on le0 proto tcp from any to any flags S/SAFR keep state 6 1.1 christos block out on le0 proto tcp all 7 1.1 christos block in on le0 proto tcp all 8 1.1 christos # 9 1.1 christos # allow nameserver queries and replies to pass through, but no other UDP 10 1.1 christos # 11 1.1 christos pass out quick on le0 proto udp from any to any port = 53 keep state 12 1.1 christos block out on le0 proto udp all 13 1.1 christos block in on le0 proto udp all 14
Indexes created Sun Oct 25 00:26:45 UTC 2026