Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- ext_if = "vr0"
- block in all
- pass out all
- #Skip PF Filtering on lo0 interface
- set skip on lo0
- #HTTP
- pass in on $ext_if proto tcp from any to any port 80
- #HTTPS
- pass in on $ext_if proto tcp from any to any port 443
- #Monit
- pass in on $ext_if proto tcp from any to any port 2812
- #SSH
- pass in on $ext_if proto tcp from any to any port 22
- #SIP UDP
- pass in on $ext_if proto udp from any to any port 5060:5090
- #SIP TCP
- pass in on $ext_if proto tcp from any to any port 5060:5090
- #RTP/RTCP
- pass in on $ext_if proto udp from any to any port 16384:32768
- #DNS UDP
- pass in on $ext_if proto udp from any to any port 53
- #DNS TCP
- pass in on $ext_if proto tcp from any to any port 53
- #IMAP TCP
- pass in on $ext_if proto tcp from any to any port 993
- #SMTP TCP
- pass in on $ext_if proto tcp from any to any port 25
- #POP3S TCP
- pass in on $ext_if proto tcp from any to any port 995
Add Comment
Please, Sign In to add comment