All pastes #59008 Raw Edit

Unnamed

public text v1 · immutable
#59008 ·published 2006-05-26 10:27 UTC
rendered paste body
term deny-microsoft {
    from {
        protocol [ tcp udp ];
        destination-port [ 135-139 445 ];
    }
    then {
        count netbios;
        discard;
    }
}
term deny-smtp {
    from {
        protocol tcp;
        destination-port 25;
    }
    then {
        count bogus-smtp;
        discard;
    }
}
term deny-upnp {
    from {
        protocol [ tcp udp ];
        destination-port [ 5000 1900 ];
    }
    then {
        count upnp;
        discard;
    }
}
term deny-messenger-spam {
    from {
        protocol udp;
        destination-port 1026;
    }
    then {
        count messenger-spam;
        discard;
    }
}
term deny-connexant-hack {
    from {
        protocol tcp;
        destination-port 254;
    }
    then {
        count conexant-hack;
        discard;
    }
}
term default-policy {
    then accept;
}




---- Out

term permit-smtp {
    from {
        destination-address {
            83.217.75.20/32;
        }
        destination-port smtp;
    }
    then accept;
}
term deny-smtp {
    from {
        destination-address {
            0.0.0.0/0;
        }
        destination-port smtp;
    }
    then {
        reject;
    }
}
term default-rule {
    then accept;
}