All pastes #742400 Raw Edit

Anonymous

public text v1 · immutable
·published 2007-10-19 14:13 UTC
rendered paste body
00100     24120      2721600 allow ip from any to any via lo0
00110         0            0 deny ip from any to 127.0.0.0/8
00120     10402      3300436 deny ip from any to any not verrevpath in
00301     97147      6404747 deny ip from 10.0.0.0/8 to any in via vx0
00302        31         2076 deny ip from 172.16.0.0/12 to any in via vx0
00303         2          168 allow ip from 192.168.100.1 to any in via vx0
00304         0            0 deny ip from 192.168.0.0/16 to any in via vx0
00400        15          720 allow tcp from any to any dst-port 20 out via vx0 setup keep-state
00401        27         1296 allow tcp from any to any dst-port 21 out via vx0 setup keep-state
00402         0            0 allow icmp from any to any out via vx0 setup keep-state
00800         0            0 pipe 1 tcp from any to 10.1.0.0/24 dst-port 6881-6890 out via em0
00801         0            0 pipe 1 tcp from any to 10.1.0.0/24 src-port 6881-6890 in via em0
00802         0            0 pipe 1 tcp from any to 10.1.0.0/24 dst-port 6346-6350 out via em0
00803         0            0 pipe 1 tcp from any to 10.1.0.0/24 src-port 6346-6350 in via em0
01000 110251300 101854995965 divert 8668 ip from any to me in via vx0
01001         0            0 check-state
04000    194395     27705060 allow tcp from 10.1.0.0/24 to me dst-port 22 in via em0 setup keep-state
04001      4541       283177 allow icmp from 10.1.0.0/24 to me in via em0
04002         0            0 allow tcp from 10.1.0.0/24 to me dst-port 123 in via em0 setup keep-state
04003         0            0 allow udp from 10.1.0.0/24 to me dst-port 123 in via em0 keep-state
04004        16          780 allow tcp from 10.1.0.0/24 to me dst-port 80 in via em0
04005       155         9808 allow tcp from 10.1.0.0/24 to me dst-port 53 in via em0
04006    141836      9992055 allow udp from 10.1.0.0/24 to me dst-port 53 in via em0
04007         0            0 allow tcp from 10.1.0.0/24 to me dst-port 137 in via em0
04008         0            0 allow tcp from 10.1.0.0/24 to me dst-port 138 in via em0
04009    843341    122812348 allow tcp from 10.1.0.0/24 to me dst-port 139 in via em0
04010        98         7644 allow udp from 10.1.0.0/24 to me dst-port 137 in via em0
04011         0            0 allow udp from 10.1.0.0/24 to me dst-port 138 in via em0
04012         0            0 allow udp from 10.1.0.0/24 to me dst-port 139 in via em0
04013     22015      7504479 allow udp from 10.1.0.0/24 to me dst-port 67 in via em0
04014         0            0 allow udp from 10.1.0.0/24 to me dst-port 68 in via em0
04015         0            0 allow tcp from 10.1.0.0/24 to me dst-port 3306 in via em0
04016     95528     15476722 allow tcp from any to me dst-port 22 in via vx0 setup keep-state
04099     18590       859125 deny ip from 10.1.0.0/24 to me
04200 379735117 226730026557 skipto 61000 ip from 10.1.0.0/24 to any in via em0 keep-state
05010 198296402 161773595198 allow ip from me to any out keep-state
59998     29017      2309856 deny icmp from any to me
59999         8          368 deny ip from any to me dst-port 135,137-139,445,4665
60000    592838     36751267 deny log tcp from any to any established
60000   6224471    753393909 deny log ip from any to any
61000  83566789  12020682832 divert 8668 ip from 10.1.0.0/24 to any out via vx0
61001 379731292 226729571052 allow ip from any to any
65535        16         1366 deny ip from any to any