blob: 477c2e071a0ef77d1f6392d8a422a8a0a1e8b0a2 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
|
#
# pass ack packets (ie established connection)
#
pass in proto tcp 10.1.0.0/16 port = 23 10.2.0.0/16 flags A/A
pass out proto tcp 10.1.0.0/16 port = 23 10.2.0.0/16 flags A/A
#
# block incoming connection requests to my internal network from the big bad
# internet.
#
block in on le0 proto tcp from any to 10.1.0.0/16 flags S/SA
# to block the replies:
block out on le0 proto tcp from 10.1.0.0 to any flags SA/SA
|
