gagarin# pfctl -nvf /etc/ipf.rules
allowed_ports = "{80, 443, 444, 22, 21}"
table <bogons> { 192.168.0.0/16 172.16.0.0/12 10.0.0.0/8 127.0.0.0/8 0.0.0.0/8 169.254.0.0/16 192.0.2.0/24 204.152.64.0/23 224.0.0.0/3 }
set skip on { lo0 }
block drop in log all
block drop in quick on rl0 from <bogons> to any
pass in quick on rl0 proto tcp from any to any port = http keep state
pass in quick on rl0 proto tcp from any to any port = https keep state
pass in quick on rl0 proto tcp from any to any port = snpp keep state
pass in quick on rl0 proto tcp from any to any port = ssh keep state
pass in quick on rl0 proto tcp from any to any port = ftp keep state
pass in quick on rl0 inet proto tcp from 66.93.233.40 to any port = ftp keep state
pass in quick on rl0 inet proto tcp from 66.93.233.40 to any port = ftp-data keep state