diff options
Diffstat (limited to 'regress/sbin/pfctl/pf7.ok')
-rw-r--r-- | regress/sbin/pfctl/pf7.ok | 42 |
1 files changed, 21 insertions, 21 deletions
diff --git a/regress/sbin/pfctl/pf7.ok b/regress/sbin/pfctl/pf7.ok index f8deafd8445..627f72c3a79 100644 --- a/regress/sbin/pfctl/pf7.ok +++ b/regress/sbin/pfctl/pf7.ok @@ -1,21 +1,21 @@ -@0 block out log on tun0 all -@1 block in log on tun0 all -@2 block return-rst out log on tun0 proto tcp all -@3 block return-rst in log on tun0 proto tcp all -@4 block return-icmp(port-unr, port-unr) out log on tun0 proto udp all -@5 block return-icmp(port-unr, port-unr) in log on tun0 proto udp all -@6 block out log quick on tun0 inet from ! 157.161.48.183 to any -@7 block in quick on tun0 inet from any to 255.255.255.255 -@8 block in log quick on tun0 inet from 10.0.0.0/8 to any -@9 block in log quick on tun0 inet from 172.16.0.0/12 to any -@10 block in log quick on tun0 inet from 192.168.0.0/16 to any -@11 block in log quick on tun0 inet from 255.255.255.255 to any -@12 pass out on tun0 inet proto icmp all icmp-type echoreq code 0 keep state -@13 pass in on tun0 inet proto icmp all icmp-type echoreq code 0 keep state -@14 pass out on tun0 proto udp all keep state -@15 pass in on tun0 proto udp from any to any port = domain keep state -@16 pass out on tun0 proto tcp all modulate state -@17 pass in on tun0 proto tcp from any to any port = ssh modulate state -@18 pass in on tun0 proto tcp from any to any port = smtp modulate state -@19 pass in on tun0 proto tcp from any to any port = domain modulate state -@20 pass in on tun0 proto tcp from any to any port = auth modulate state +block out log on tun0 all +block in log on tun0 all +block return-rst out log on tun0 proto tcp all +block return-rst in log on tun0 proto tcp all +block return-icmp(port-unr, port-unr) out log on tun0 proto udp all +block return-icmp(port-unr, port-unr) in log on tun0 proto udp all +block out log quick on tun0 inet from ! 157.161.48.183 to any +block in quick on tun0 inet from any to 255.255.255.255 +block in log quick on tun0 inet from 10.0.0.0/8 to any +block in log quick on tun0 inet from 172.16.0.0/12 to any +block in log quick on tun0 inet from 192.168.0.0/16 to any +block in log quick on tun0 inet from 255.255.255.255 to any +pass out on tun0 inet proto icmp all icmp-type echoreq code 0 keep state +pass in on tun0 inet proto icmp all icmp-type echoreq code 0 keep state +pass out on tun0 proto udp all keep state +pass in on tun0 proto udp from any to any port = domain keep state +pass out on tun0 proto tcp all modulate state +pass in on tun0 proto tcp from any to any port = ssh modulate state +pass in on tun0 proto tcp from any to any port = smtp modulate state +pass in on tun0 proto tcp from any to any port = domain modulate state +pass in on tun0 proto tcp from any to any port = auth modulate state |