Guest User

Untitled

a guest
Jan 31st, 2026
113
0
Never
1
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 25.22 KB | None | 0 0
  1. root@router:~ # pfctl -sr
  2. scrub in all fragment reassemble
  3. block drop in log on ! igb1 inet from 98.97.116.0/22 to any
  4. block drop in log on ! igb1 inet from 192.168.100.0/24 to any
  5. block drop in log on ! igb2 inet from 104.193.102.0/24 to any
  6. block drop in log inet from <__automatic_fc5e728b_0> to any
  7. block drop in log on ! igb3 inet from 192.168.4.0/24 to any
  8. block drop in log on ! igb4 inet from 192.168.90.0/24 to any
  9. block drop in log on ! igb0 inet from 192.168.111.0/24 to any
  10. block drop in log on ! igb5 inet from 192.168.99.0/24 to any
  11. block drop in log on ! ix2 inet from 192.168.80.0/24 to any
  12. block drop in log on ! ix1 inet from 192.168.89.0/24 to any
  13. block drop in log on ! ix0 inet from 192.168.88.0/24 to any
  14. block drop in log on ! ix3 inet from 192.168.82.0/24 to any
  15. block drop in log quick inet6 all label "97a4b05767f50fda0c6db9a40db7d47b"
  16. block drop in log inet all label "02f4bab031b57d1e30553ce08e0ec131"
  17. block drop in log inet6 all label "02f4bab031b57d1e30553ce08e0ec131"
  18. block drop in log quick inet proto tcp from any port = 0 to any label "b477ac1c8f5237a59ee416b9d819ce58"
  19. block drop in log quick inet proto udp from any port = 0 to any label "b477ac1c8f5237a59ee416b9d819ce58"
  20. block drop in log quick inet6 proto tcp from any port = 0 to any label "b477ac1c8f5237a59ee416b9d819ce58"
  21. block drop in log quick inet6 proto udp from any port = 0 to any label "b477ac1c8f5237a59ee416b9d819ce58"
  22. block drop in log quick inet proto tcp from any to any port = 0 label "b454844853f2346167ad77449b79ad8e"
  23. block drop in log quick inet proto udp from any to any port = 0 label "b454844853f2346167ad77449b79ad8e"
  24. block drop in log quick inet6 proto tcp from any to any port = 0 label "b454844853f2346167ad77449b79ad8e"
  25. block drop in log quick inet6 proto udp from any to any port = 0 label "b454844853f2346167ad77449b79ad8e"
  26. block drop in log quick proto tcp from <sshlockout> to (self) port = ssh label "8b59cf89872747f657c42f9e93dd52e0"
  27. block drop in log quick proto tcp from <sshlockout> to (self) port = https label "27ad7dee30c19305dc0187bf0e87cd4e"
  28. block drop in log quick from <virusprot> to any label "add09fc915886757c300419fc2ecc1e6"
  29. pass in log quick on igb2 proto udp from any port = bootps to any port = bootpc keep state label "f8ab0f040d3c7f6a1881146940f52329"
  30. pass out log quick on igb2 proto udp from any port = bootpc to any port = bootps keep state label "3dfe828ebc89ac4d72f5c103f5630d2e"
  31. pass in log quick on igb1 proto udp from any port = bootps to any port = bootpc keep state label "f994f615e00b8be0042263f86c79913f"
  32. pass out log quick on igb1 proto udp from any port = bootpc to any port = bootps keep state label "5cf7ab808da1fcbca1ddb9ba9b46b669"
  33. pass in log quick on igb3 proto udp from any port = bootps to any port = bootpc keep state label "e41a0e7d2ef54e0fa147112e5f18fabb"
  34. pass out log quick on igb3 proto udp from any port = bootpc to any port = bootps keep state label "4d6601357cb79b6282438cfc5c377b33"
  35. pass in log quick on igb4 inet proto udp from any port = bootpc to 255.255.255.255 port = bootps keep state label "23eeefd19e2d600419b8f78f3a81ee19"
  36. pass in log quick on igb4 proto udp from any port = bootpc to (self) port = bootps keep state label "8da42b0fbc49f84156d1ce1ca9c6fd75"
  37. pass out log quick on igb4 proto udp from (self) port = bootps to any port = bootpc keep state label "98bb97a0d64e367bbe72d2ecbdaf0fb0"
  38. pass in log quick on igb4 inet6 proto udp from fe80::/10 to fe80::/10 port = dhcpv6-client keep state label "0df2991e866602a6d2da07b98a976e2e"
  39. pass in log quick on igb4 inet6 proto udp from fe80::/10 to ff02::/16 port = dhcpv6-client keep state label "0df2991e866602a6d2da07b98a976e2e"
  40. pass in log quick on igb4 inet6 proto udp from fe80::/10 to ff02::/16 port = dhcpv6-server keep state label "e087a03ca6de7671c773d13d7e977262"
  41. pass in log quick on igb4 inet6 proto udp from ff02::/16 to fe80::/10 port = dhcpv6-server keep state label "4049e9978d1aa1f70fe7bd514ab06f0d"
  42. pass in log quick on igb4 inet6 proto udp from fe80::/10 to (self) port = dhcpv6-client keep state label "9e8786dfbaf4d87f96d3733b5073b049"
  43. pass out log quick on igb4 inet6 proto udp from (self) port = dhcpv6-server to fe80::/10 keep state label "952f88fe5d0f27a6512a8422b6e8ce8f"
  44. pass in log quick on igb0 inet proto udp from any port = bootpc to 255.255.255.255 port = bootps keep state label "0925e2cf287d76562ca251ea62851b5f"
  45. pass in log quick on igb0 proto udp from any port = bootpc to (self) port = bootps keep state label "eed764c32048c9fec0b41d2206a3c608"
  46. pass out log quick on igb0 proto udp from (self) port = bootps to any port = bootpc keep state label "c67ab6b64c4cd181b92c19501436c8d7"
  47. pass in log quick on igb0 inet6 proto udp from fe80::/10 to fe80::/10 port = dhcpv6-client keep state label "1f03dfdbd97a6675c4a595d43cedced1"
  48. pass in log quick on igb0 inet6 proto udp from fe80::/10 to ff02::/16 port = dhcpv6-client keep state label "1f03dfdbd97a6675c4a595d43cedced1"
  49. pass in log quick on igb0 inet6 proto udp from fe80::/10 to ff02::/16 port = dhcpv6-server keep state label "35f9eddceb38c62af0a9067316776d82"
  50. pass in log quick on igb0 inet6 proto udp from ff02::/16 to fe80::/10 port = dhcpv6-server keep state label "313a89c1292547cc87164fdd11652fb5"
  51. pass in log quick on igb0 inet6 proto udp from fe80::/10 to (self) port = dhcpv6-client keep state label "d587ab9b3d41c2de3de74326f2da1619"
  52. pass out log quick on igb0 inet6 proto udp from (self) port = dhcpv6-server to fe80::/10 keep state label "1a303d0412f131cdde78167cf1a5606d"
  53. pass in log quick on igb5 inet proto udp from any port = bootpc to 255.255.255.255 port = bootps keep state label "5d73ec9025eafb3b38e2bdb6fdd06061"
  54. pass in log quick on igb5 proto udp from any port = bootpc to (self) port = bootps keep state label "dd39569f09d2c995e84b9a851cfea3ed"
  55. pass out log quick on igb5 proto udp from (self) port = bootps to any port = bootpc keep state label "101685663b39aa21bb6c8c164362b974"
  56. pass in log quick on igb5 inet6 proto udp from fe80::/10 to fe80::/10 port = dhcpv6-client keep state label "e86132db765169ea051bb0e50236126b"
  57. pass in log quick on igb5 inet6 proto udp from fe80::/10 to ff02::/16 port = dhcpv6-client keep state label "e86132db765169ea051bb0e50236126b"
  58. pass in log quick on igb5 inet6 proto udp from fe80::/10 to ff02::/16 port = dhcpv6-server keep state label "d6980b12ad0bfd35c73bf78da6ed8b07"
  59. pass in log quick on igb5 inet6 proto udp from ff02::/16 to fe80::/10 port = dhcpv6-server keep state label "76294006eb042f9f5e07dd94fc381de9"
  60. pass in log quick on igb5 inet6 proto udp from fe80::/10 to (self) port = dhcpv6-client keep state label "cebfb3a39a9de31fea53ad0798eaac0b"
  61. pass out log quick on igb5 inet6 proto udp from (self) port = dhcpv6-server to fe80::/10 keep state label "e0755c2cfa3c28d7232ca67b28697ad0"
  62. pass in log quick on ix2 inet proto udp from any port = bootpc to 255.255.255.255 port = bootps keep state label "3f7fea0eb7ac89d26fee92060435b28d"
  63. pass in log quick on ix2 proto udp from any port = bootpc to (self) port = bootps keep state label "bfb90bb364cd4ccba923557b49f58247"
  64. pass out log quick on ix2 proto udp from (self) port = bootps to any port = bootpc keep state label "dec0fb66120a81e8a76a35c7d9305448"
  65. pass in log quick on ix2 inet6 proto udp from fe80::/10 to fe80::/10 port = dhcpv6-client keep state label "6e7424af7edfadfb1816b1b897dce97a"
  66. pass in log quick on ix2 inet6 proto udp from fe80::/10 to ff02::/16 port = dhcpv6-client keep state label "6e7424af7edfadfb1816b1b897dce97a"
  67. pass in log quick on ix2 inet6 proto udp from fe80::/10 to ff02::/16 port = dhcpv6-server keep state label "cf449d59b60f0aac19f4a4a80503018f"
  68. pass in log quick on ix2 inet6 proto udp from ff02::/16 to fe80::/10 port = dhcpv6-server keep state label "5da36fbfe22b5b7ea9db452057e5dd15"
  69. pass in log quick on ix2 inet6 proto udp from fe80::/10 to (self) port = dhcpv6-client keep state label "7469680e3cc08432a92b9285a13c0bfc"
  70. pass out log quick on ix2 inet6 proto udp from (self) port = dhcpv6-server to fe80::/10 keep state label "5761272d39e94244092565b861325069"
  71. pass in log quick on ix1 inet proto udp from any port = bootpc to 255.255.255.255 port = bootps keep state label "56d97e04b8ce723a8524bdda932fe056"
  72. pass in log quick on ix1 proto udp from any port = bootpc to (self) port = bootps keep state label "ac5d6855f1bc6d537c949fd7ce458587"
  73. pass out log quick on ix1 proto udp from (self) port = bootps to any port = bootpc keep state label "4071f735e7cf9dcad8b9305970c17911"
  74. pass in log quick on ix1 inet6 proto udp from fe80::/10 to fe80::/10 port = dhcpv6-client keep state label "600d48bc4d9a060084eea027fa54cfdc"
  75. pass in log quick on ix1 inet6 proto udp from fe80::/10 to ff02::/16 port = dhcpv6-client keep state label "600d48bc4d9a060084eea027fa54cfdc"
  76. pass in log quick on ix1 inet6 proto udp from fe80::/10 to ff02::/16 port = dhcpv6-server keep state label "0e8cdb22b7059277a934591353ae2214"
  77. pass in log quick on ix1 inet6 proto udp from ff02::/16 to fe80::/10 port = dhcpv6-server keep state label "06e2b143a84862bc38acb6bac5090d14"
  78. pass in log quick on ix1 inet6 proto udp from fe80::/10 to (self) port = dhcpv6-client keep state label "04bd2bc40ab1391b8ce89ff0fafd1e67"
  79. pass out log quick on ix1 inet6 proto udp from (self) port = dhcpv6-server to fe80::/10 keep state label "0926e497e454bfe83d715b0d85fdfe3a"
  80. pass in log quick on ix0 inet proto udp from any port = bootpc to 255.255.255.255 port = bootps keep state label "d31abd66ebb6c8a4b565f97d9763a3a3"
  81. pass in log quick on ix0 proto udp from any port = bootpc to (self) port = bootps keep state label "154865da201b3e32cf77addbb19b8224"
  82. pass out log quick on ix0 proto udp from (self) port = bootps to any port = bootpc keep state label "b4aa2b58d6b6c7db56f6f40a1475d7b8"
  83. pass in log quick on ix0 inet6 proto udp from fe80::/10 to fe80::/10 port = dhcpv6-client keep state label "b5a0cc95c43246e8d7cba994ffed7982"
  84. pass in log quick on ix0 inet6 proto udp from fe80::/10 to ff02::/16 port = dhcpv6-client keep state label "b5a0cc95c43246e8d7cba994ffed7982"
  85. pass in log quick on ix0 inet6 proto udp from fe80::/10 to ff02::/16 port = dhcpv6-server keep state label "435024c7fbb62f50ac93070b5a8f4715"
  86. pass in log quick on ix0 inet6 proto udp from ff02::/16 to fe80::/10 port = dhcpv6-server keep state label "f7c77e0b89fba268fd58bc7c7533c112"
  87. pass in log quick on ix0 inet6 proto udp from fe80::/10 to (self) port = dhcpv6-client keep state label "f9a76929815aefbfe2fc0eee69f8d847"
  88. pass out log quick on ix0 inet6 proto udp from (self) port = dhcpv6-server to fe80::/10 keep state label "43214b5c9c4bd303ac75c981d814321e"
  89. pass in log quick on ix3 inet proto udp from any port = bootpc to 255.255.255.255 port = bootps keep state label "03b1df4bf62ce677123044d57e8e60b7"
  90. pass in log quick on ix3 proto udp from any port = bootpc to (self) port = bootps keep state label "4749c8cd166b293d17735bbe5fafeba7"
  91. pass out log quick on ix3 proto udp from (self) port = bootps to any port = bootpc keep state label "4fa69e1fc6f690d3cf45e05e517f2448"
  92. pass in log quick on ix3 inet6 proto udp from fe80::/10 to fe80::/10 port = dhcpv6-client keep state label "939d681febd9e3466ef8a12b27d64c0f"
  93. pass in log quick on ix3 inet6 proto udp from fe80::/10 to ff02::/16 port = dhcpv6-client keep state label "939d681febd9e3466ef8a12b27d64c0f"
  94. pass in log quick on ix3 inet6 proto udp from fe80::/10 to ff02::/16 port = dhcpv6-server keep state label "4821d7ce2e22b7f16097ae6dc6d1daa2"
  95. pass in log quick on ix3 inet6 proto udp from ff02::/16 to fe80::/10 port = dhcpv6-server keep state label "c63c997e3cc96fd90d29d8b05686b19f"
  96. pass in log quick on ix3 inet6 proto udp from fe80::/10 to (self) port = dhcpv6-client keep state label "14c2a36dc5849b4ff7d2f27d17569718"
  97. pass out log quick on ix3 inet6 proto udp from (self) port = dhcpv6-server to fe80::/10 keep state label "a3228c8a3726d15188b7ff67041c14cd"
  98. block drop in log quick on igb2 inet from <bogons> to any label "5448723dbce75da66e08e3c6a2fe4129"
  99. block drop in log quick on igb2 inet from 10.0.0.0/8 to any label "0bf697f3b6ffb13caaf16c0749b4cf32"
  100. block drop in log quick on igb2 inet from 172.16.0.0/12 to any label "0bf697f3b6ffb13caaf16c0749b4cf32"
  101. block drop in log quick on igb2 inet from 192.168.0.0/16 to any label "0bf697f3b6ffb13caaf16c0749b4cf32"
  102. block drop in log quick on igb2 inet from 127.0.0.0/8 to any label "0bf697f3b6ffb13caaf16c0749b4cf32"
  103. block drop in log quick on igb2 inet from 100.64.0.0/10 to any label "0bf697f3b6ffb13caaf16c0749b4cf32"
  104. block drop in log quick on igb2 inet from 169.254.0.0/16 to any label "0bf697f3b6ffb13caaf16c0749b4cf32"
  105. block drop in log quick on igb1 inet from <bogons> to any label "b7cd97a164650b538506fb551a0369e7"
  106. block drop in log quick on igb3 inet from <bogons> to any label "79400e680220f2f36beb7d6e944fa93a"
  107. pass out log all flags S/SA keep state allow-opts label "fae559338f65e11c53669fc3642c93c2"
  108. pass in log quick on ix1 proto tcp from any to (self) port = ssh flags S/SA keep state label "60533d555322b9f6a009f71c1c471480"
  109. pass in log quick on ix1 proto tcp from any to (self) port = http flags S/SA keep state label "01e83daa25c4483dee217a7ecd7c9a88"
  110. pass in log quick on ix1 proto tcp from any to (self) port = https flags S/SA keep state label "3345e04986bd5750d23b77cbbb21271f"
  111. pass out log route-to (igb2 104.193.102.1) inet from (igb2) to ! (igb2:network) flags S/SA keep state allow-opts label "3d57ac02f310d8317852bc233c031423"
  112. pass out log route-to (igb1 98.97.116.1) inet from (igb1) to ! (igb1:network) flags S/SA keep state allow-opts label "c80911f932f41294774ca0c4a2b64b56"
  113. pass out log route-to (igb3 192.168.4.1) inet from (igb3) to ! (igb3:network) flags S/SA keep state allow-opts label "7d097ee7f87ebd06b3345a088fc4913e"
  114. pass in quick on igb1 route-to (igb1 98.97.116.1) inet proto tcp from any to 192.168.89.198 port = 22111 flags S/SA keep state label "88a4b095-8d45-4d72-a6d4-1043197558ed"
  115. pass in quick on igb1 route-to (igb1 98.97.116.1) inet proto udp from any to 192.168.89.198 port = 22111 keep state label "88a4b095-8d45-4d72-a6d4-1043197558ed"
  116. pass in quick on igb1 inet proto tcp from any to 192.168.100.1 flags S/SA keep state label "1658211a-8fa1-4cd9-8de7-e338825446fc"
  117. block drop in quick on igb1 inet from any to ! (self) label "b843051c-29a2-43d4-af1e-80c52721f29d"
  118. pass in quick on ix1 inet proto tcp from 192.168.89.194 to (general:network) flags S/SA keep state label "207ba661-9e83-43ef-b9e0-20b89c91e02c"
  119. pass in quick on ix1 inet proto udp from 192.168.89.194 to (general:network) keep state label "207ba661-9e83-43ef-b9e0-20b89c91e02c"
  120. pass in quick on ix1 route-to (igb2 104.193.102.1) inet from 192.168.89.194 to any flags S/SA keep state label "5036047d-f83a-4d58-909a-491b474f38b7"
  121. pass in quick on ix1 inet proto tcp from 192.168.89.198 to any flags S/SA keep state label "3ed27c10-141e-47db-bdd8-33df84539a55"
  122. pass in quick on ix1 inet proto udp from 192.168.89.198 to any keep state label "3ed27c10-141e-47db-bdd8-33df84539a55"
  123. pass in log quick on ix1 route-to (igb1 98.97.116.1) inet from 192.168.89.198 to any flags S/SA keep state label "b8988ef1-3824-4c1a-b3bc-8876bcd9462f"
  124. pass in quick on ix1 inet proto tcp from (ix1:network) to (self) port = domain flags S/SA keep state label "c87e7e96-1126-4e94-99f3-e7646babfb50"
  125. pass in quick on ix1 inet proto udp from (ix1:network) to (self) port = domain keep state label "c87e7e96-1126-4e94-99f3-e7646babfb50"
  126. pass in quick on ix1 inet proto icmp from (ix1:network) to any keep state label "ba15a2c7-e9f5-4ec8-95b2-b77d704b177f"
  127. pass in quick on ix1 inet proto tcp from (ix1:network) to any flags S/SA keep state label "6bbfa637-836a-44d2-a52e-47bbea22e508"
  128. pass in quick on ix1 inet proto udp from (ix1:network) to any keep state label "6bbfa637-836a-44d2-a52e-47bbea22e508"
  129. block drop in quick on ix1 inet from (ix1:network) to any label "c28c60c0-19fd-46ed-b6a8-3bca1e91ba11"
  130. block drop in quick on ix1 inet6 from (ix1:network) to any label "82785cc2-4aff-4961-bbe2-a2aef1bde4bb"
  131. block drop in quick on ix1 inet6 from fe80::/10 to any label "82785cc2-4aff-4961-bbe2-a2aef1bde4bb"
  132. pass in quick on ix0 inet proto tcp from any to (ix0:network) port = http flags S/SA keep state label "7d1e1f64-3895-43c3-8cac-ef208a8af3a2"
  133. pass in quick on ix0 inet proto tcp from (ix0:network) to (self) port = domain flags S/SA keep state label "49d443e7-d7ba-43e4-b71b-bb0085d31e42"
  134. pass in quick on ix0 inet proto udp from (ix0:network) to (self) port = domain keep state label "49d443e7-d7ba-43e4-b71b-bb0085d31e42"
  135. pass in quick on ix0 inet proto tcp from (ix0:network) to any flags S/SA keep state label "02183855-245d-47ad-9f42-f20e77e44624"
  136. pass in quick on ix0 inet proto udp from (ix0:network) to any keep state label "02183855-245d-47ad-9f42-f20e77e44624"
  137. pass in quick on ix0 inet proto icmp from (ix0:network) to any icmp-type echorep keep state label "3292a629-b019-415a-a257-fc87aae00725"
  138. pass in quick on ix0 inet proto icmp from (ix0:network) to any icmp-type echoreq keep state label "3292a629-b019-415a-a257-fc87aae00725"
  139. block drop in quick on ix0 inet from (ix0:network) to any label "73096c45-1d7b-4f2c-8b09-3e06bb0c9ebd"
  140. block drop in quick on ix0 inet6 from (ix0:network) to any label "df8353ae-4cd8-4069-9d8f-9005659dde6c"
  141. block drop in quick on ix0 inet6 from fe80::/10 to any label "df8353ae-4cd8-4069-9d8f-9005659dde6c"
  142. pass in quick on ix3 inet proto tcp from any to (ix3) port = http flags S/SA keep state label "96672f7c-e6cd-4589-b899-df70e9025690"
  143. pass in quick on ix3 inet proto tcp from (ix3:network) to (self) port = domain flags S/SA keep state label "42a6ac5d-69a9-4d7e-afba-22bad036350d"
  144. pass in quick on ix3 inet proto udp from (ix3:network) to (self) port = domain keep state label "42a6ac5d-69a9-4d7e-afba-22bad036350d"
  145. pass in quick on ix3 inet proto tcp from (ix3:network) to 192.168.89.199 flags S/SA keep state label "16f38561-e1ad-4c77-9794-a6bfa5a08880"
  146. pass in quick on ix3 inet proto udp from (ix3:network) to 192.168.89.199 keep state label "16f38561-e1ad-4c77-9794-a6bfa5a08880"
  147. pass in quick on ix3 inet proto tcp from (ix3:network) to 192.168.89.198 flags S/SA keep state label "855f1c2f-04ee-4c5f-a080-a8940c21c039"
  148. pass in quick on ix3 inet proto udp from (ix3:network) to 192.168.89.198 keep state label "855f1c2f-04ee-4c5f-a080-a8940c21c039"
  149. pass in quick on ix3 inet proto tcp from (ix3:network) to 192.168.89.197 flags S/SA keep state label "c1dac840-725d-4189-8567-d2224cb447d1"
  150. pass in quick on ix3 inet proto udp from (ix3:network) to 192.168.89.197 keep state label "c1dac840-725d-4189-8567-d2224cb447d1"
  151. pass in quick on ix3 inet proto tcp from (ix3:network) to 192.168.89.195 flags S/SA keep state label "4a1ed2b5-90ef-451d-8867-18a6972cf8dc"
  152. pass in quick on ix3 inet proto udp from (ix3:network) to 192.168.89.195 keep state label "4a1ed2b5-90ef-451d-8867-18a6972cf8dc"
  153. pass in quick on ix3 inet proto tcp from (ix3:network) to 192.168.89.194 flags S/SA keep state label "c45bbe93-9726-4e2d-9e20-0df9162023a1"
  154. pass in quick on ix3 inet proto udp from (ix3:network) to 192.168.89.194 keep state label "c45bbe93-9726-4e2d-9e20-0df9162023a1"
  155. pass in quick on ix3 inet proto tcp from (ix3:network) to 192.168.89.190 flags S/SA keep state label "a4b5bac8-40c6-4cfa-886d-5bc03a1a063f"
  156. pass in quick on ix3 inet proto udp from (ix3:network) to 192.168.89.190 keep state label "a4b5bac8-40c6-4cfa-886d-5bc03a1a063f"
  157. pass in quick on ix3 inet proto tcp from (ix3:network) to 192.168.89.192 flags S/SA keep state label "e52c0d9c-8794-414d-83a4-25ca0e33df8b"
  158. pass in quick on ix3 inet proto udp from (ix3:network) to 192.168.89.192 keep state label "e52c0d9c-8794-414d-83a4-25ca0e33df8b"
  159. block drop in quick on ix3 inet from 192.168.82.128/28 to any label "217932eb-9788-4652-a9ae-6c702bd12fb1"
  160. block drop in quick on ix3 inet from (ix3:network) to (internal:network) label "a533d0b3-13aa-4a33-9761-ba4d20f17747"
  161. pass in quick on ix3 inet proto tcp from (ix3:network) to any flags S/SA keep state label "0a0860d4-58dd-491d-8486-fd423a0499fa"
  162. pass in quick on ix3 inet proto udp from (ix3:network) to any keep state label "0a0860d4-58dd-491d-8486-fd423a0499fa"
  163. pass in quick on ix3 inet proto icmp from (ix3:network) to any icmp-type echorep keep state label "559ecc4b-4cf0-4efa-baa6-4ae1dd0d2ec6"
  164. pass in quick on ix3 inet proto icmp from (ix3:network) to any icmp-type echoreq keep state label "559ecc4b-4cf0-4efa-baa6-4ae1dd0d2ec6"
  165. block drop in quick on ix3 inet from (ix3:network) to any label "5f556e7b-6b33-436f-b822-53f98f13456a"
  166. block drop in quick on ix3 inet6 from (ix3:network) to any label "92ee3429-50b1-4691-a49c-8005d9944832"
  167. block drop in quick on ix3 inet6 from fe80::/10 to any label "92ee3429-50b1-4691-a49c-8005d9944832"
  168. pass in quick on igb0 inet proto tcp from (igb0:network) to (self) port = http flags S/SA keep state label "41e4c98e-09bd-4dcc-922d-a9e1fd80bbe2"
  169. pass in quick on igb0 inet proto tcp from (igb0:network) to (self) port = https flags S/SA keep state label "adb423ea-cc51-4f56-a22a-4fdfa8815e7c"
  170. pass in quick on igb0 inet proto udp from (igb0:network) to (self) port = https keep state label "adb423ea-cc51-4f56-a22a-4fdfa8815e7c"
  171. pass in quick on igb5 inet proto tcp from (igb5:network) to (self) port = domain flags S/SA keep state label "53af13ab-e380-411d-b86e-fadb659dc858"
  172. pass in quick on igb5 inet proto udp from (igb5:network) to (self) port = domain keep state label "53af13ab-e380-411d-b86e-fadb659dc858"
  173. block drop in quick on igb5 inet6 from (igb5:network) to any label "56137f36-a28f-49ae-86f3-14ce1090c700"
  174. block drop in quick on igb5 inet6 from fe80::/10 to any label "56137f36-a28f-49ae-86f3-14ce1090c700"
  175. block drop in quick on igb5 inet from (igb5:network) to (general:network) label "353feb08-602e-45c4-9ac5-fcfa2ea20aa6"
  176. block drop in quick on igb5 inet from (igb5:network) to any label "ba88d0d3-4908-4bb0-a5c5-e85af25768e0"
  177. pass in quick on igb4 inet proto tcp from (igb4:network) to (self) port = domain flags S/SA keep state label "179ed27e-f736-4924-815a-d14d3a3b7245"
  178. pass in quick on igb4 inet proto udp from (igb4:network) to (self) port = domain keep state label "179ed27e-f736-4924-815a-d14d3a3b7245"
  179. pass in quick on igb4 inet proto udp from (igb4:network) to (self) port = ntp keep state label "c64ba473-588f-4841-9368-6bdb6bf26822"
  180. pass in quick on igb4 inet from 192.168.90.100 to 192.168.89.198 flags S/SA keep state label "e3daa10b-4869-43cd-8a54-83e517cb12fc"
  181. pass in quick on igb4 inet from 192.168.90.100 to 192.168.89.197 flags S/SA keep state label "7da698d4-c3ee-41c1-8d5e-2afd0b14e0c1"
  182. pass in quick on igb4 inet proto tcp from 192.168.90.100 to 192.168.89.195 flags S/SA keep state label "6e50ee7e-fd1a-471e-b29e-7d92690fad88"
  183. pass in quick on igb4 inet proto udp from 192.168.90.100 to 192.168.89.195 keep state label "6e50ee7e-fd1a-471e-b29e-7d92690fad88"
  184. pass in quick on igb4 inet from 192.168.90.102 to 192.168.89.198 flags S/SA keep state label "72c04fc7-c9d4-41aa-8784-b05373e16fba"
  185. pass in quick on igb4 inet from 192.168.90.102 to 192.168.89.197 flags S/SA keep state label "68abad3e-5189-4e6e-968e-9d7dfd8704a3"
  186. pass in quick on igb4 inet proto tcp from 192.168.90.102 to 192.168.89.195 flags S/SA keep state label "ac39ff4f-6e05-4111-b92d-2a5076e7dab3"
  187. pass in quick on igb4 inet proto udp from 192.168.90.102 to 192.168.89.195 keep state label "ac39ff4f-6e05-4111-b92d-2a5076e7dab3"
  188. block drop in quick on igb4 inet from (igb4:network) to any label "50fd4935-ab00-4665-ba3e-89b0b8312033"
  189. block drop in quick on igb4 inet6 from (igb4:network) to any label "4209554d-e607-43a9-8520-213bc800e8c4"
  190. block drop in quick on igb4 inet6 from fe80::/10 to any label "4209554d-e607-43a9-8520-213bc800e8c4"
  191. pass in quick on ix2 inet proto tcp from (ix2:network) to (self) port = http flags S/SA keep state label "637db59e-b88c-4cab-b0b6-e969c9a42c55"
  192. pass in quick on ix2 inet proto tcp from (ix2:network) to (self) port = https flags S/SA keep state label "56f38ba0-d2f7-44d9-a89b-e6dad038b99b"
  193. pass in quick on ix2 inet proto udp from (ix2:network) to (self) port = https keep state label "56f38ba0-d2f7-44d9-a89b-e6dad038b99b"
  194. pass in quick on ix2 inet proto tcp from (ix2:network) to (self) port = domain flags S/SA keep state label "d685d780-b787-41d6-84fd-fe9518f717c6"
  195. pass in quick on ix2 inet proto udp from (ix2:network) to (self) port = domain keep state label "d685d780-b787-41d6-84fd-fe9518f717c6"
  196. pass in quick on ix2 inet from 192.168.80.110 to (internal:network) flags S/SA keep state label "33132a62-d99f-45a1-aa05-602ffce977cf"
  197. pass in quick on ix2 route-to (igb1 98.97.116.1) inet from 192.168.80.110 to any flags S/SA keep state label "067f3316-917d-4958-846b-f8483b7ed58f"
  198. pass in quick on ix2 inet proto tcp from (ix2:network) to any flags S/SA keep state label "163726db-8048-4139-874a-bfceea1355d9"
  199. pass in quick on ix2 inet proto udp from (ix2:network) to any keep state label "163726db-8048-4139-874a-bfceea1355d9"
  200. pass in quick on ix2 inet proto icmp from (ix2:network) to any icmp-type echorep keep state label "9bc6d52f-1928-4a8b-8441-18393c66a507"
  201. pass in quick on ix2 inet proto icmp from (ix2:network) to any icmp-type echoreq keep state label "9bc6d52f-1928-4a8b-8441-18393c66a507"
  202. block drop in quick on ix2 inet from (ix2:network) to any label "8e41848d-224c-443a-a2a7-b5226a0c2ab2"
  203. block drop in quick on ix2 inet6 from (ix2:network) to any label "fb9b7a34-7dc5-4273-ae6c-3e1706fcdc1e"
  204. block drop in quick on ix2 inet6 from fe80::/10 to any label "fb9b7a34-7dc5-4273-ae6c-3e1706fcdc1e"
  205. pass in quick on igb3 inet proto tcp from any to 192.168.4.1 flags S/SA keep state label "f8e68a66-e182-4caa-b740-0d87f779e96f"
  206. block drop in quick on igb3 inet from any to ! (self) label "f19ae521-4037-4e84-852b-36b514433577"
  207.  
Advertisement
Comments
  • User was banned
Add Comment
Please, Sign In to add comment