18 lines
1.1 KiB
Text
18 lines
1.1 KiB
Text
|
pass in inet from 127.0.0.1/32 to 127.0.0.1/32 with short,frag
|
||
|
|
block in from any to any with ipopts
|
||
|
|
pass in inet from any to any with opt nop,rr,zsu
|
||
|
|
pass in inet from any to any with opt nop,rr,zsu not opt lsrr,ssrr
|
||
|
|
pass in inet from 127.0.0.1/32 to 127.0.0.1/32 with not frag
|
||
|
|
pass in inet from 127.0.0.1/32 to 127.0.0.1/32 with frag,frag-body
|
||
|
|
pass in proto tcp from any to any flags S/FSRPAU with not oow keep state # count 0
|
||
|
|
block in proto tcp from any to any with oow
|
||
|
|
pass in proto tcp from any to any flags S/FSRPAU with not bad,bad-src,bad-nat
|
||
|
|
block in proto tcp from any to any flags S/FSRPAU with bad,not bad-src,not bad-nat
|
||
|
|
pass in quick from any to any with not short
|
||
|
|
block in quick from any to any with not nat
|
||
|
|
pass in quick from any to any with not frag-body
|
||
|
|
block in quick from any to any with not lowttl
|
||
|
|
pass in from any to any with not ipopts,mbcast,not bcast,mcast,not state
|
||
|
|
block in from any to any with not mbcast,bcast,not mcast,state
|
||
|
|
pass in inet from any to any with opt mtup,mtur,encode,ts,tr,sec,e-sec,cipso,satid,ssrr,addext,visa,imitd,eip,finn,dps,sdb,nsapa,rtralrt,ump
|