Lines Matching refs:on
2 # log all inbound packet on le0 which has IP options present
4 log in on le0 from any to any with ipopts
6 # block any inbound packets on le0 which are fragmented and "too short" to
7 # do any meaningful comparison on. This actually only applies to TCP
8 # packets which can be missing the flags/ports (depending on which part
11 block in log quick on le0 from any to any with short frag
18 log in on le0 proto tcp from any to any flags S/SA
22 block in log on le0 proto icmp from any to any icmp-type unreach
24 # block and log any inbound UDP packets on le0 which are going to port 2049
27 block in log on le0 proto udp from any to any port = 2049
38 block in quick on le0 from any to any with ipopts
46 block in on le0 proto udp from any to 10.1.3.0/24
47 block in on le0 proto udp from any to 10.1.1.0/24
48 block in on le0 proto udp from any to 10.1.2.0/24
53 block in on le0 proto tcp from any to 10.1.3.0/24 flags S/SA
54 block in on le0 proto tcp from any to 10.1.2.0/24 flags S/SA
55 block in on le0 proto tcp from any to 10.1.1.0/24 flags S/SA
59 block in on le0 proto icmp from any to 10.1.3.0/24
60 block in on le0 proto icmp from any to 10.1.1.0/24
61 block in on le0 proto icmp from any to 10.1.2.0/24