pf-view-rule

Shell:~ >: pf-view-rule
scrub in all fragment reassemble
block drop log all
pass quick on lo0 all flags S/SA keep state
pass in on re0 inet from 192.168.1.0/24 to any flags S/SA keep state
pass out on re0 inet from any to 192.168.1.0/24 flags S/SA keep state
block drop in quick on tun0 inet from 127.0.0.0/8 to any
block drop in quick on tun0 inet from 10.0.0.0/8 to any
block drop in quick on tun0 inet from 172.16.0.0/12 to any
block drop in quick on tun0 inet from 192.168.0.0/16 to any
block drop out quick on tun0 inet from any to 127.0.0.0/8
block drop out quick on tun0 inet from any to 10.0.0.0/8
block drop out quick on tun0 inet from any to 172.16.0.0/12
block drop out quick on tun0 inet from any to 192.168.0.0/16
block drop in log quick on ! re0 inet from 192.168.1.0/24 to any
block drop in log quick inet from 192.168.1.23 to any
pass out on tun0 proto tcp all flags S/SA modulate state
pass out on tun0 proto udp all keep state
pass out on tun0 proto icmp all keep state
pass out on tun0 proto esp all keep state
pass out on tun1 proto tcp all flags S/SA modulate state
pass out on tun1 proto udp all keep state
pass out on tun1 proto icmp all keep state
pass out on tun1 proto esp all keep state
pass in on tun0 proto tcp from any to any port = 44123 flags S/SA keep state
pass in on tun0 proto udp from any to any port = 44123 keep state

评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值