Something
public text v1 · immutablecogent_net = "66.250.69.0/23"
limelight_net = "69.28.157.0/24"
int_if = "bge0"
cogent_if = "fxp0"
limelight_if = "fxp1"
cogent_gw = "66.250.4.149"
limelight_gw = "69.28.156.193"
set limit { states 50000, frags 25000, src-nodes 50000 }
set timeout tcp.established 3600
table <spammers> persist file "/etc/spammers"
pass in quick on $int_if from $cogent_net to $limelight_net
pass in quick on $int_if from $limelight_net to $cogent_net
pass in quick on $cogent_if proto tcp from any to $cogent_net flags S/SA
pass in quick on $limelight_if proto tcp from any to $limelight_net flags S/SA
pass in on $cogent_if from any to $cogent_net
pass in on $limelight_if from any to $limelight_net
pass in on $int_if route-to ($cogent_if $cogent_gw) from $cogent_net to any
pass in on $int_if route-to ($limelight_if $limelight_gw) from $limelight_net to any
block in quick on $cogent_if proto tcp from any to any port = 111
block in quick on $limelight_if proto tcp from any to any port = 111
block in quick on $cogent_if proto tcp from <spammers> to any port = 25
block in quick on $limelight_if proto tcp from <spammers> to any port = 25