blob: 08ba19ad55881484702548dcbec5a70068851f65 (
plain)
1
2
3
4
5
6
7
8
9
10
|
block in on eri0(!) all head 1
pass in on eri0(!) proto icmp from any to any group 1
pass out on ed0(!) all head 1000000
block out on ed0(!) proto udp from any to any group 1000000
block in on vm0(!) proto tcp/udp from any to any head 101
pass in proto tcp/udp from 1.1.1.1/32 to 2.2.2.2/32 group 101
pass in proto tcp from 1.0.0.1/32 to 2.0.0.2/32 group 101
pass in proto udp from 2.0.0.2/32 to 3.0.0.3/32 group 101
block in on vm0(!) proto tcp/udp from any to any head vm0-group
pass in proto tcp/udp from 1.1.1.1/32 to 2.2.2.2/32 group vm0-group
|
