pf-view-rule

Shell:~ >: pf-view-rule
scrub in all fragment reassemble
block drop log all
pass quick on lo0 all flags S/SA keep state
pass in on re0 inet from 192.168.1.0/24 to any flags S/SA keep state
pass out on re0 inet from any to 192.168.1.0/24 flags S/SA keep state
block drop in quick on tun0 inet from 127.0.0.0/8 to any
block drop in quick on tun0 inet from 10.0.0.0/8 to any
block drop in quick on tun0 inet from 172.16.0.0/12 to any
block drop in quick on tun0 inet from 192.168.0.0/16 to any
block drop out quick on tun0 inet from any to 127.0.0.0/8
block drop out quick on tun0 inet from any to 10.0.0.0/8
block drop out quick on tun0 inet from any to 172.16.0.0/12
block drop out quick on tun0 inet from any to 192.168.0.0/16
block drop in log quick on ! re0 inet from 192.168.1.0/24 to any
block drop in log quick inet from 192.168.1.23 to any
pass out on tun0 proto tcp all flags S/SA modulate state
pass out on tun0 proto udp all keep state
pass out on tun0 proto icmp all keep state
pass out on tun0 proto esp all keep state
pass out on tun1 proto tcp all flags S/SA modulate state
pass out on tun1 proto udp all keep state
pass out on tun1 proto icmp all keep state
pass out on tun1 proto esp all keep state
pass in on tun0 proto tcp from any to any port = 44123 flags S/SA keep state
pass in on tun0 proto udp from any to any port = 44123 keep state

你可能感兴趣的:(view)