diff options
-rw-r--r-- | etc/inc/filter.inc | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc index e716016..4680db5 100644 --- a/etc/inc/filter.inc +++ b/etc/inc/filter.inc @@ -2072,6 +2072,10 @@ function filter_rules_generate() { $ipfrules .= <<<EOD +# We use the mighty pf, we cannot be fooled. +block quick proto { tcp, udp } from any port = 0 to any +block quick proto { tcp, udp } from any to any port = 0 + # snort2c table <snort2c> persist block quick from <snort2c> to any label "Block snort2c hosts" |