Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- root@router:~ # pfctl -sr
- scrub in all fragment reassemble
- block drop in log on ! igb1 inet from 98.97.116.0/22 to any
- block drop in log on ! igb1 inet from 192.168.100.0/24 to any
- block drop in log on ! igb2 inet from 104.193.102.0/24 to any
- block drop in log inet from <__automatic_fc5e728b_0> to any
- block drop in log on ! igb3 inet from 192.168.4.0/24 to any
- block drop in log on ! igb4 inet from 192.168.90.0/24 to any
- block drop in log on ! igb0 inet from 192.168.111.0/24 to any
- block drop in log on ! igb5 inet from 192.168.99.0/24 to any
- block drop in log on ! ix2 inet from 192.168.80.0/24 to any
- block drop in log on ! ix1 inet from 192.168.89.0/24 to any
- block drop in log on ! ix0 inet from 192.168.88.0/24 to any
- block drop in log on ! ix3 inet from 192.168.82.0/24 to any
- block drop in log quick inet6 all label "97a4b05767f50fda0c6db9a40db7d47b"
- block drop in log inet all label "02f4bab031b57d1e30553ce08e0ec131"
- block drop in log inet6 all label "02f4bab031b57d1e30553ce08e0ec131"
- block drop in log quick inet proto tcp from any port = 0 to any label "b477ac1c8f5237a59ee416b9d819ce58"
- block drop in log quick inet proto udp from any port = 0 to any label "b477ac1c8f5237a59ee416b9d819ce58"
- block drop in log quick inet6 proto tcp from any port = 0 to any label "b477ac1c8f5237a59ee416b9d819ce58"
- block drop in log quick inet6 proto udp from any port = 0 to any label "b477ac1c8f5237a59ee416b9d819ce58"
- block drop in log quick inet proto tcp from any to any port = 0 label "b454844853f2346167ad77449b79ad8e"
- block drop in log quick inet proto udp from any to any port = 0 label "b454844853f2346167ad77449b79ad8e"
- block drop in log quick inet6 proto tcp from any to any port = 0 label "b454844853f2346167ad77449b79ad8e"
- block drop in log quick inet6 proto udp from any to any port = 0 label "b454844853f2346167ad77449b79ad8e"
- block drop in log quick proto tcp from <sshlockout> to (self) port = ssh label "8b59cf89872747f657c42f9e93dd52e0"
- block drop in log quick proto tcp from <sshlockout> to (self) port = https label "27ad7dee30c19305dc0187bf0e87cd4e"
- block drop in log quick from <virusprot> to any label "add09fc915886757c300419fc2ecc1e6"
- pass in log quick on igb2 proto udp from any port = bootps to any port = bootpc keep state label "f8ab0f040d3c7f6a1881146940f52329"
- pass out log quick on igb2 proto udp from any port = bootpc to any port = bootps keep state label "3dfe828ebc89ac4d72f5c103f5630d2e"
- pass in log quick on igb1 proto udp from any port = bootps to any port = bootpc keep state label "f994f615e00b8be0042263f86c79913f"
- pass out log quick on igb1 proto udp from any port = bootpc to any port = bootps keep state label "5cf7ab808da1fcbca1ddb9ba9b46b669"
- pass in log quick on igb3 proto udp from any port = bootps to any port = bootpc keep state label "e41a0e7d2ef54e0fa147112e5f18fabb"
- pass out log quick on igb3 proto udp from any port = bootpc to any port = bootps keep state label "4d6601357cb79b6282438cfc5c377b33"
- pass in log quick on igb4 inet proto udp from any port = bootpc to 255.255.255.255 port = bootps keep state label "23eeefd19e2d600419b8f78f3a81ee19"
- pass in log quick on igb4 proto udp from any port = bootpc to (self) port = bootps keep state label "8da42b0fbc49f84156d1ce1ca9c6fd75"
- pass out log quick on igb4 proto udp from (self) port = bootps to any port = bootpc keep state label "98bb97a0d64e367bbe72d2ecbdaf0fb0"
- pass in log quick on igb4 inet6 proto udp from fe80::/10 to fe80::/10 port = dhcpv6-client keep state label "0df2991e866602a6d2da07b98a976e2e"
- pass in log quick on igb4 inet6 proto udp from fe80::/10 to ff02::/16 port = dhcpv6-client keep state label "0df2991e866602a6d2da07b98a976e2e"
- pass in log quick on igb4 inet6 proto udp from fe80::/10 to ff02::/16 port = dhcpv6-server keep state label "e087a03ca6de7671c773d13d7e977262"
- pass in log quick on igb4 inet6 proto udp from ff02::/16 to fe80::/10 port = dhcpv6-server keep state label "4049e9978d1aa1f70fe7bd514ab06f0d"
- pass in log quick on igb4 inet6 proto udp from fe80::/10 to (self) port = dhcpv6-client keep state label "9e8786dfbaf4d87f96d3733b5073b049"
- pass out log quick on igb4 inet6 proto udp from (self) port = dhcpv6-server to fe80::/10 keep state label "952f88fe5d0f27a6512a8422b6e8ce8f"
- pass in log quick on igb0 inet proto udp from any port = bootpc to 255.255.255.255 port = bootps keep state label "0925e2cf287d76562ca251ea62851b5f"
- pass in log quick on igb0 proto udp from any port = bootpc to (self) port = bootps keep state label "eed764c32048c9fec0b41d2206a3c608"
- pass out log quick on igb0 proto udp from (self) port = bootps to any port = bootpc keep state label "c67ab6b64c4cd181b92c19501436c8d7"
- pass in log quick on igb0 inet6 proto udp from fe80::/10 to fe80::/10 port = dhcpv6-client keep state label "1f03dfdbd97a6675c4a595d43cedced1"
- pass in log quick on igb0 inet6 proto udp from fe80::/10 to ff02::/16 port = dhcpv6-client keep state label "1f03dfdbd97a6675c4a595d43cedced1"
- pass in log quick on igb0 inet6 proto udp from fe80::/10 to ff02::/16 port = dhcpv6-server keep state label "35f9eddceb38c62af0a9067316776d82"
- pass in log quick on igb0 inet6 proto udp from ff02::/16 to fe80::/10 port = dhcpv6-server keep state label "313a89c1292547cc87164fdd11652fb5"
- pass in log quick on igb0 inet6 proto udp from fe80::/10 to (self) port = dhcpv6-client keep state label "d587ab9b3d41c2de3de74326f2da1619"
- pass out log quick on igb0 inet6 proto udp from (self) port = dhcpv6-server to fe80::/10 keep state label "1a303d0412f131cdde78167cf1a5606d"
- pass in log quick on igb5 inet proto udp from any port = bootpc to 255.255.255.255 port = bootps keep state label "5d73ec9025eafb3b38e2bdb6fdd06061"
- pass in log quick on igb5 proto udp from any port = bootpc to (self) port = bootps keep state label "dd39569f09d2c995e84b9a851cfea3ed"
- pass out log quick on igb5 proto udp from (self) port = bootps to any port = bootpc keep state label "101685663b39aa21bb6c8c164362b974"
- pass in log quick on igb5 inet6 proto udp from fe80::/10 to fe80::/10 port = dhcpv6-client keep state label "e86132db765169ea051bb0e50236126b"
- pass in log quick on igb5 inet6 proto udp from fe80::/10 to ff02::/16 port = dhcpv6-client keep state label "e86132db765169ea051bb0e50236126b"
- pass in log quick on igb5 inet6 proto udp from fe80::/10 to ff02::/16 port = dhcpv6-server keep state label "d6980b12ad0bfd35c73bf78da6ed8b07"
- pass in log quick on igb5 inet6 proto udp from ff02::/16 to fe80::/10 port = dhcpv6-server keep state label "76294006eb042f9f5e07dd94fc381de9"
- pass in log quick on igb5 inet6 proto udp from fe80::/10 to (self) port = dhcpv6-client keep state label "cebfb3a39a9de31fea53ad0798eaac0b"
- pass out log quick on igb5 inet6 proto udp from (self) port = dhcpv6-server to fe80::/10 keep state label "e0755c2cfa3c28d7232ca67b28697ad0"
- pass in log quick on ix2 inet proto udp from any port = bootpc to 255.255.255.255 port = bootps keep state label "3f7fea0eb7ac89d26fee92060435b28d"
- pass in log quick on ix2 proto udp from any port = bootpc to (self) port = bootps keep state label "bfb90bb364cd4ccba923557b49f58247"
- pass out log quick on ix2 proto udp from (self) port = bootps to any port = bootpc keep state label "dec0fb66120a81e8a76a35c7d9305448"
- pass in log quick on ix2 inet6 proto udp from fe80::/10 to fe80::/10 port = dhcpv6-client keep state label "6e7424af7edfadfb1816b1b897dce97a"
- pass in log quick on ix2 inet6 proto udp from fe80::/10 to ff02::/16 port = dhcpv6-client keep state label "6e7424af7edfadfb1816b1b897dce97a"
- pass in log quick on ix2 inet6 proto udp from fe80::/10 to ff02::/16 port = dhcpv6-server keep state label "cf449d59b60f0aac19f4a4a80503018f"
- pass in log quick on ix2 inet6 proto udp from ff02::/16 to fe80::/10 port = dhcpv6-server keep state label "5da36fbfe22b5b7ea9db452057e5dd15"
- pass in log quick on ix2 inet6 proto udp from fe80::/10 to (self) port = dhcpv6-client keep state label "7469680e3cc08432a92b9285a13c0bfc"
- pass out log quick on ix2 inet6 proto udp from (self) port = dhcpv6-server to fe80::/10 keep state label "5761272d39e94244092565b861325069"
- pass in log quick on ix1 inet proto udp from any port = bootpc to 255.255.255.255 port = bootps keep state label "56d97e04b8ce723a8524bdda932fe056"
- pass in log quick on ix1 proto udp from any port = bootpc to (self) port = bootps keep state label "ac5d6855f1bc6d537c949fd7ce458587"
- pass out log quick on ix1 proto udp from (self) port = bootps to any port = bootpc keep state label "4071f735e7cf9dcad8b9305970c17911"
- pass in log quick on ix1 inet6 proto udp from fe80::/10 to fe80::/10 port = dhcpv6-client keep state label "600d48bc4d9a060084eea027fa54cfdc"
- pass in log quick on ix1 inet6 proto udp from fe80::/10 to ff02::/16 port = dhcpv6-client keep state label "600d48bc4d9a060084eea027fa54cfdc"
- pass in log quick on ix1 inet6 proto udp from fe80::/10 to ff02::/16 port = dhcpv6-server keep state label "0e8cdb22b7059277a934591353ae2214"
- pass in log quick on ix1 inet6 proto udp from ff02::/16 to fe80::/10 port = dhcpv6-server keep state label "06e2b143a84862bc38acb6bac5090d14"
- pass in log quick on ix1 inet6 proto udp from fe80::/10 to (self) port = dhcpv6-client keep state label "04bd2bc40ab1391b8ce89ff0fafd1e67"
- pass out log quick on ix1 inet6 proto udp from (self) port = dhcpv6-server to fe80::/10 keep state label "0926e497e454bfe83d715b0d85fdfe3a"
- pass in log quick on ix0 inet proto udp from any port = bootpc to 255.255.255.255 port = bootps keep state label "d31abd66ebb6c8a4b565f97d9763a3a3"
- pass in log quick on ix0 proto udp from any port = bootpc to (self) port = bootps keep state label "154865da201b3e32cf77addbb19b8224"
- pass out log quick on ix0 proto udp from (self) port = bootps to any port = bootpc keep state label "b4aa2b58d6b6c7db56f6f40a1475d7b8"
- pass in log quick on ix0 inet6 proto udp from fe80::/10 to fe80::/10 port = dhcpv6-client keep state label "b5a0cc95c43246e8d7cba994ffed7982"
- pass in log quick on ix0 inet6 proto udp from fe80::/10 to ff02::/16 port = dhcpv6-client keep state label "b5a0cc95c43246e8d7cba994ffed7982"
- pass in log quick on ix0 inet6 proto udp from fe80::/10 to ff02::/16 port = dhcpv6-server keep state label "435024c7fbb62f50ac93070b5a8f4715"
- pass in log quick on ix0 inet6 proto udp from ff02::/16 to fe80::/10 port = dhcpv6-server keep state label "f7c77e0b89fba268fd58bc7c7533c112"
- pass in log quick on ix0 inet6 proto udp from fe80::/10 to (self) port = dhcpv6-client keep state label "f9a76929815aefbfe2fc0eee69f8d847"
- pass out log quick on ix0 inet6 proto udp from (self) port = dhcpv6-server to fe80::/10 keep state label "43214b5c9c4bd303ac75c981d814321e"
- pass in log quick on ix3 inet proto udp from any port = bootpc to 255.255.255.255 port = bootps keep state label "03b1df4bf62ce677123044d57e8e60b7"
- pass in log quick on ix3 proto udp from any port = bootpc to (self) port = bootps keep state label "4749c8cd166b293d17735bbe5fafeba7"
- pass out log quick on ix3 proto udp from (self) port = bootps to any port = bootpc keep state label "4fa69e1fc6f690d3cf45e05e517f2448"
- pass in log quick on ix3 inet6 proto udp from fe80::/10 to fe80::/10 port = dhcpv6-client keep state label "939d681febd9e3466ef8a12b27d64c0f"
- pass in log quick on ix3 inet6 proto udp from fe80::/10 to ff02::/16 port = dhcpv6-client keep state label "939d681febd9e3466ef8a12b27d64c0f"
- pass in log quick on ix3 inet6 proto udp from fe80::/10 to ff02::/16 port = dhcpv6-server keep state label "4821d7ce2e22b7f16097ae6dc6d1daa2"
- pass in log quick on ix3 inet6 proto udp from ff02::/16 to fe80::/10 port = dhcpv6-server keep state label "c63c997e3cc96fd90d29d8b05686b19f"
- pass in log quick on ix3 inet6 proto udp from fe80::/10 to (self) port = dhcpv6-client keep state label "14c2a36dc5849b4ff7d2f27d17569718"
- pass out log quick on ix3 inet6 proto udp from (self) port = dhcpv6-server to fe80::/10 keep state label "a3228c8a3726d15188b7ff67041c14cd"
- block drop in log quick on igb2 inet from <bogons> to any label "5448723dbce75da66e08e3c6a2fe4129"
- block drop in log quick on igb2 inet from 10.0.0.0/8 to any label "0bf697f3b6ffb13caaf16c0749b4cf32"
- block drop in log quick on igb2 inet from 172.16.0.0/12 to any label "0bf697f3b6ffb13caaf16c0749b4cf32"
- block drop in log quick on igb2 inet from 192.168.0.0/16 to any label "0bf697f3b6ffb13caaf16c0749b4cf32"
- block drop in log quick on igb2 inet from 127.0.0.0/8 to any label "0bf697f3b6ffb13caaf16c0749b4cf32"
- block drop in log quick on igb2 inet from 100.64.0.0/10 to any label "0bf697f3b6ffb13caaf16c0749b4cf32"
- block drop in log quick on igb2 inet from 169.254.0.0/16 to any label "0bf697f3b6ffb13caaf16c0749b4cf32"
- block drop in log quick on igb1 inet from <bogons> to any label "b7cd97a164650b538506fb551a0369e7"
- block drop in log quick on igb3 inet from <bogons> to any label "79400e680220f2f36beb7d6e944fa93a"
- pass out log all flags S/SA keep state allow-opts label "fae559338f65e11c53669fc3642c93c2"
- pass in log quick on ix1 proto tcp from any to (self) port = ssh flags S/SA keep state label "60533d555322b9f6a009f71c1c471480"
- pass in log quick on ix1 proto tcp from any to (self) port = http flags S/SA keep state label "01e83daa25c4483dee217a7ecd7c9a88"
- pass in log quick on ix1 proto tcp from any to (self) port = https flags S/SA keep state label "3345e04986bd5750d23b77cbbb21271f"
- pass out log route-to (igb2 104.193.102.1) inet from (igb2) to ! (igb2:network) flags S/SA keep state allow-opts label "3d57ac02f310d8317852bc233c031423"
- pass out log route-to (igb1 98.97.116.1) inet from (igb1) to ! (igb1:network) flags S/SA keep state allow-opts label "c80911f932f41294774ca0c4a2b64b56"
- pass out log route-to (igb3 192.168.4.1) inet from (igb3) to ! (igb3:network) flags S/SA keep state allow-opts label "7d097ee7f87ebd06b3345a088fc4913e"
- pass in quick on igb1 route-to (igb1 98.97.116.1) inet proto tcp from any to 192.168.89.198 port = 22111 flags S/SA keep state label "88a4b095-8d45-4d72-a6d4-1043197558ed"
- pass in quick on igb1 route-to (igb1 98.97.116.1) inet proto udp from any to 192.168.89.198 port = 22111 keep state label "88a4b095-8d45-4d72-a6d4-1043197558ed"
- pass in quick on igb1 inet proto tcp from any to 192.168.100.1 flags S/SA keep state label "1658211a-8fa1-4cd9-8de7-e338825446fc"
- block drop in quick on igb1 inet from any to ! (self) label "b843051c-29a2-43d4-af1e-80c52721f29d"
- pass in quick on ix1 inet proto tcp from 192.168.89.194 to (general:network) flags S/SA keep state label "207ba661-9e83-43ef-b9e0-20b89c91e02c"
- pass in quick on ix1 inet proto udp from 192.168.89.194 to (general:network) keep state label "207ba661-9e83-43ef-b9e0-20b89c91e02c"
- pass in quick on ix1 route-to (igb2 104.193.102.1) inet from 192.168.89.194 to any flags S/SA keep state label "5036047d-f83a-4d58-909a-491b474f38b7"
- pass in quick on ix1 inet proto tcp from 192.168.89.198 to any flags S/SA keep state label "3ed27c10-141e-47db-bdd8-33df84539a55"
- pass in quick on ix1 inet proto udp from 192.168.89.198 to any keep state label "3ed27c10-141e-47db-bdd8-33df84539a55"
- pass in log quick on ix1 route-to (igb1 98.97.116.1) inet from 192.168.89.198 to any flags S/SA keep state label "b8988ef1-3824-4c1a-b3bc-8876bcd9462f"
- pass in quick on ix1 inet proto tcp from (ix1:network) to (self) port = domain flags S/SA keep state label "c87e7e96-1126-4e94-99f3-e7646babfb50"
- pass in quick on ix1 inet proto udp from (ix1:network) to (self) port = domain keep state label "c87e7e96-1126-4e94-99f3-e7646babfb50"
- pass in quick on ix1 inet proto icmp from (ix1:network) to any keep state label "ba15a2c7-e9f5-4ec8-95b2-b77d704b177f"
- pass in quick on ix1 inet proto tcp from (ix1:network) to any flags S/SA keep state label "6bbfa637-836a-44d2-a52e-47bbea22e508"
- pass in quick on ix1 inet proto udp from (ix1:network) to any keep state label "6bbfa637-836a-44d2-a52e-47bbea22e508"
- block drop in quick on ix1 inet from (ix1:network) to any label "c28c60c0-19fd-46ed-b6a8-3bca1e91ba11"
- block drop in quick on ix1 inet6 from (ix1:network) to any label "82785cc2-4aff-4961-bbe2-a2aef1bde4bb"
- block drop in quick on ix1 inet6 from fe80::/10 to any label "82785cc2-4aff-4961-bbe2-a2aef1bde4bb"
- pass in quick on ix0 inet proto tcp from any to (ix0:network) port = http flags S/SA keep state label "7d1e1f64-3895-43c3-8cac-ef208a8af3a2"
- pass in quick on ix0 inet proto tcp from (ix0:network) to (self) port = domain flags S/SA keep state label "49d443e7-d7ba-43e4-b71b-bb0085d31e42"
- pass in quick on ix0 inet proto udp from (ix0:network) to (self) port = domain keep state label "49d443e7-d7ba-43e4-b71b-bb0085d31e42"
- pass in quick on ix0 inet proto tcp from (ix0:network) to any flags S/SA keep state label "02183855-245d-47ad-9f42-f20e77e44624"
- pass in quick on ix0 inet proto udp from (ix0:network) to any keep state label "02183855-245d-47ad-9f42-f20e77e44624"
- pass in quick on ix0 inet proto icmp from (ix0:network) to any icmp-type echorep keep state label "3292a629-b019-415a-a257-fc87aae00725"
- pass in quick on ix0 inet proto icmp from (ix0:network) to any icmp-type echoreq keep state label "3292a629-b019-415a-a257-fc87aae00725"
- block drop in quick on ix0 inet from (ix0:network) to any label "73096c45-1d7b-4f2c-8b09-3e06bb0c9ebd"
- block drop in quick on ix0 inet6 from (ix0:network) to any label "df8353ae-4cd8-4069-9d8f-9005659dde6c"
- block drop in quick on ix0 inet6 from fe80::/10 to any label "df8353ae-4cd8-4069-9d8f-9005659dde6c"
- pass in quick on ix3 inet proto tcp from any to (ix3) port = http flags S/SA keep state label "96672f7c-e6cd-4589-b899-df70e9025690"
- pass in quick on ix3 inet proto tcp from (ix3:network) to (self) port = domain flags S/SA keep state label "42a6ac5d-69a9-4d7e-afba-22bad036350d"
- pass in quick on ix3 inet proto udp from (ix3:network) to (self) port = domain keep state label "42a6ac5d-69a9-4d7e-afba-22bad036350d"
- pass in quick on ix3 inet proto tcp from (ix3:network) to 192.168.89.199 flags S/SA keep state label "16f38561-e1ad-4c77-9794-a6bfa5a08880"
- pass in quick on ix3 inet proto udp from (ix3:network) to 192.168.89.199 keep state label "16f38561-e1ad-4c77-9794-a6bfa5a08880"
- pass in quick on ix3 inet proto tcp from (ix3:network) to 192.168.89.198 flags S/SA keep state label "855f1c2f-04ee-4c5f-a080-a8940c21c039"
- pass in quick on ix3 inet proto udp from (ix3:network) to 192.168.89.198 keep state label "855f1c2f-04ee-4c5f-a080-a8940c21c039"
- pass in quick on ix3 inet proto tcp from (ix3:network) to 192.168.89.197 flags S/SA keep state label "c1dac840-725d-4189-8567-d2224cb447d1"
- pass in quick on ix3 inet proto udp from (ix3:network) to 192.168.89.197 keep state label "c1dac840-725d-4189-8567-d2224cb447d1"
- pass in quick on ix3 inet proto tcp from (ix3:network) to 192.168.89.195 flags S/SA keep state label "4a1ed2b5-90ef-451d-8867-18a6972cf8dc"
- pass in quick on ix3 inet proto udp from (ix3:network) to 192.168.89.195 keep state label "4a1ed2b5-90ef-451d-8867-18a6972cf8dc"
- pass in quick on ix3 inet proto tcp from (ix3:network) to 192.168.89.194 flags S/SA keep state label "c45bbe93-9726-4e2d-9e20-0df9162023a1"
- pass in quick on ix3 inet proto udp from (ix3:network) to 192.168.89.194 keep state label "c45bbe93-9726-4e2d-9e20-0df9162023a1"
- pass in quick on ix3 inet proto tcp from (ix3:network) to 192.168.89.190 flags S/SA keep state label "a4b5bac8-40c6-4cfa-886d-5bc03a1a063f"
- pass in quick on ix3 inet proto udp from (ix3:network) to 192.168.89.190 keep state label "a4b5bac8-40c6-4cfa-886d-5bc03a1a063f"
- pass in quick on ix3 inet proto tcp from (ix3:network) to 192.168.89.192 flags S/SA keep state label "e52c0d9c-8794-414d-83a4-25ca0e33df8b"
- pass in quick on ix3 inet proto udp from (ix3:network) to 192.168.89.192 keep state label "e52c0d9c-8794-414d-83a4-25ca0e33df8b"
- block drop in quick on ix3 inet from 192.168.82.128/28 to any label "217932eb-9788-4652-a9ae-6c702bd12fb1"
- block drop in quick on ix3 inet from (ix3:network) to (internal:network) label "a533d0b3-13aa-4a33-9761-ba4d20f17747"
- pass in quick on ix3 inet proto tcp from (ix3:network) to any flags S/SA keep state label "0a0860d4-58dd-491d-8486-fd423a0499fa"
- pass in quick on ix3 inet proto udp from (ix3:network) to any keep state label "0a0860d4-58dd-491d-8486-fd423a0499fa"
- pass in quick on ix3 inet proto icmp from (ix3:network) to any icmp-type echorep keep state label "559ecc4b-4cf0-4efa-baa6-4ae1dd0d2ec6"
- pass in quick on ix3 inet proto icmp from (ix3:network) to any icmp-type echoreq keep state label "559ecc4b-4cf0-4efa-baa6-4ae1dd0d2ec6"
- block drop in quick on ix3 inet from (ix3:network) to any label "5f556e7b-6b33-436f-b822-53f98f13456a"
- block drop in quick on ix3 inet6 from (ix3:network) to any label "92ee3429-50b1-4691-a49c-8005d9944832"
- block drop in quick on ix3 inet6 from fe80::/10 to any label "92ee3429-50b1-4691-a49c-8005d9944832"
- pass in quick on igb0 inet proto tcp from (igb0:network) to (self) port = http flags S/SA keep state label "41e4c98e-09bd-4dcc-922d-a9e1fd80bbe2"
- pass in quick on igb0 inet proto tcp from (igb0:network) to (self) port = https flags S/SA keep state label "adb423ea-cc51-4f56-a22a-4fdfa8815e7c"
- pass in quick on igb0 inet proto udp from (igb0:network) to (self) port = https keep state label "adb423ea-cc51-4f56-a22a-4fdfa8815e7c"
- pass in quick on igb5 inet proto tcp from (igb5:network) to (self) port = domain flags S/SA keep state label "53af13ab-e380-411d-b86e-fadb659dc858"
- pass in quick on igb5 inet proto udp from (igb5:network) to (self) port = domain keep state label "53af13ab-e380-411d-b86e-fadb659dc858"
- block drop in quick on igb5 inet6 from (igb5:network) to any label "56137f36-a28f-49ae-86f3-14ce1090c700"
- block drop in quick on igb5 inet6 from fe80::/10 to any label "56137f36-a28f-49ae-86f3-14ce1090c700"
- block drop in quick on igb5 inet from (igb5:network) to (general:network) label "353feb08-602e-45c4-9ac5-fcfa2ea20aa6"
- block drop in quick on igb5 inet from (igb5:network) to any label "ba88d0d3-4908-4bb0-a5c5-e85af25768e0"
- pass in quick on igb4 inet proto tcp from (igb4:network) to (self) port = domain flags S/SA keep state label "179ed27e-f736-4924-815a-d14d3a3b7245"
- pass in quick on igb4 inet proto udp from (igb4:network) to (self) port = domain keep state label "179ed27e-f736-4924-815a-d14d3a3b7245"
- pass in quick on igb4 inet proto udp from (igb4:network) to (self) port = ntp keep state label "c64ba473-588f-4841-9368-6bdb6bf26822"
- pass in quick on igb4 inet from 192.168.90.100 to 192.168.89.198 flags S/SA keep state label "e3daa10b-4869-43cd-8a54-83e517cb12fc"
- pass in quick on igb4 inet from 192.168.90.100 to 192.168.89.197 flags S/SA keep state label "7da698d4-c3ee-41c1-8d5e-2afd0b14e0c1"
- pass in quick on igb4 inet proto tcp from 192.168.90.100 to 192.168.89.195 flags S/SA keep state label "6e50ee7e-fd1a-471e-b29e-7d92690fad88"
- pass in quick on igb4 inet proto udp from 192.168.90.100 to 192.168.89.195 keep state label "6e50ee7e-fd1a-471e-b29e-7d92690fad88"
- pass in quick on igb4 inet from 192.168.90.102 to 192.168.89.198 flags S/SA keep state label "72c04fc7-c9d4-41aa-8784-b05373e16fba"
- pass in quick on igb4 inet from 192.168.90.102 to 192.168.89.197 flags S/SA keep state label "68abad3e-5189-4e6e-968e-9d7dfd8704a3"
- pass in quick on igb4 inet proto tcp from 192.168.90.102 to 192.168.89.195 flags S/SA keep state label "ac39ff4f-6e05-4111-b92d-2a5076e7dab3"
- pass in quick on igb4 inet proto udp from 192.168.90.102 to 192.168.89.195 keep state label "ac39ff4f-6e05-4111-b92d-2a5076e7dab3"
- block drop in quick on igb4 inet from (igb4:network) to any label "50fd4935-ab00-4665-ba3e-89b0b8312033"
- block drop in quick on igb4 inet6 from (igb4:network) to any label "4209554d-e607-43a9-8520-213bc800e8c4"
- block drop in quick on igb4 inet6 from fe80::/10 to any label "4209554d-e607-43a9-8520-213bc800e8c4"
- pass in quick on ix2 inet proto tcp from (ix2:network) to (self) port = http flags S/SA keep state label "637db59e-b88c-4cab-b0b6-e969c9a42c55"
- pass in quick on ix2 inet proto tcp from (ix2:network) to (self) port = https flags S/SA keep state label "56f38ba0-d2f7-44d9-a89b-e6dad038b99b"
- pass in quick on ix2 inet proto udp from (ix2:network) to (self) port = https keep state label "56f38ba0-d2f7-44d9-a89b-e6dad038b99b"
- pass in quick on ix2 inet proto tcp from (ix2:network) to (self) port = domain flags S/SA keep state label "d685d780-b787-41d6-84fd-fe9518f717c6"
- pass in quick on ix2 inet proto udp from (ix2:network) to (self) port = domain keep state label "d685d780-b787-41d6-84fd-fe9518f717c6"
- pass in quick on ix2 inet from 192.168.80.110 to (internal:network) flags S/SA keep state label "33132a62-d99f-45a1-aa05-602ffce977cf"
- pass in quick on ix2 route-to (igb1 98.97.116.1) inet from 192.168.80.110 to any flags S/SA keep state label "067f3316-917d-4958-846b-f8483b7ed58f"
- pass in quick on ix2 inet proto tcp from (ix2:network) to any flags S/SA keep state label "163726db-8048-4139-874a-bfceea1355d9"
- pass in quick on ix2 inet proto udp from (ix2:network) to any keep state label "163726db-8048-4139-874a-bfceea1355d9"
- pass in quick on ix2 inet proto icmp from (ix2:network) to any icmp-type echorep keep state label "9bc6d52f-1928-4a8b-8441-18393c66a507"
- pass in quick on ix2 inet proto icmp from (ix2:network) to any icmp-type echoreq keep state label "9bc6d52f-1928-4a8b-8441-18393c66a507"
- block drop in quick on ix2 inet from (ix2:network) to any label "8e41848d-224c-443a-a2a7-b5226a0c2ab2"
- block drop in quick on ix2 inet6 from (ix2:network) to any label "fb9b7a34-7dc5-4273-ae6c-3e1706fcdc1e"
- block drop in quick on ix2 inet6 from fe80::/10 to any label "fb9b7a34-7dc5-4273-ae6c-3e1706fcdc1e"
- pass in quick on igb3 inet proto tcp from any to 192.168.4.1 flags S/SA keep state label "f8e68a66-e182-4caa-b740-0d87f779e96f"
- block drop in quick on igb3 inet from any to ! (self) label "f19ae521-4037-4e84-852b-36b514433577"
Advertisement