xref: /titanic_44/usr/src/cmd/ipf/examples/tcpstate (revision da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968)
1#
2# Only allow TCP packets in/out of le0 if there is an outgoing connection setup
3# somewhere, waiting for it.
4#
5pass out quick on le0 proto tcp from any to any flags S/SAFR keep state
6block out on le0 proto tcp all
7block in on le0 proto tcp all
8#
9# allow nameserver queries and replies to pass through, but no other UDP
10#
11pass out quick on le0 proto udp from any to any port = 53 keep state
12block out on le0 proto udp all
13block in on le0 proto udp all
14