33 lines
686 B
Plaintext
33 lines
686 B
Plaintext
|
# pfctl -o duplicate rules
|
||
|
|
|
||
|
|
pass in on lo1000000 from any to 10.0.0.1
|
||
|
|
pass in on lo1000000 inet from any to 10.0.0.1
|
||
|
|
|
||
|
|
pass
|
||
|
|
pass out
|
||
|
|
pass out
|
||
|
|
pass out quick
|
||
|
|
|
||
|
|
pass on lo1000001 to 10.0.0.1
|
||
|
|
pass on lo1000000 from any to 10.0.0.1
|
||
|
|
|
||
|
|
pass to 10.0.0.2 modulate state
|
||
|
|
pass to 10.0.0.2 keep state
|
||
|
|
block from 10.0.0.3 to 10.0.0.2
|
||
|
|
pass to 10.0.0.2 modulate state
|
||
|
|
block from 10.0.0.3 to 10.0.0.2
|
||
|
|
pass to 10.0.0.2 synproxy state
|
||
|
|
|
||
|
|
|
||
|
|
pass out proto tcp from 10.0.0.4 to 10.0.0.5 keep state
|
||
|
|
pass out proto tcp from 10.0.0.4 to 10.0.0.5 port 80 keep state
|
||
|
|
|
||
|
|
pass out
|
||
|
|
pass in
|
||
|
|
|
||
|
|
pass in on lo1000001 from any to any
|
||
|
|
pass in on lo1000001 from any to any keep state
|
||
|
|
pass in on lo1000001 from any to any
|
||
|
|
|
||
|
|
block
|