Public feed
#892343
@0 scrub all random-id fragment reassemble
[ Evaluations: 9775293 Packets: 9775293 Bytes: 0 States: 0 ]
@0 anchor "ftpsesame/*" all
[ Evaluations: 71910 Packets: 0 Bytes: 0 States: 0 ]
@1 anchor "firewallrules" all
[ Evaluations: 71910 Packets: 0 Bytes: 0 States: 0 ]
@2 block drop quick proto tcp from any port = 0 to any
[ Evaluations: 71910 Packets: 0 Bytes: 0 States: 0 ]
@3 block drop quick proto tcp from any to any port = 0
[ Evaluations: 40182 Packets: 0 Bytes: 0 States: 0 ]
@4 block drop quick proto udp from any port = 0 to any
[ Evaluations: 71910 Packets: 0 Bytes: 0 States: 0 ]
@5 block drop quick proto udp from any to any port = 0
[ Evaluations: 21543 Packets: 0 Bytes: 0 States: 0 ]
@6 block drop quick from <snort2c:0> to any label "Block snort2c hosts"
[ Evaluations: 71910 Packets: 0 Bytes: 0 States: 0 ]
@7 block drop quick from any to <snort2c:0> label "Block snort2c hosts"
[ Evaluations: 71910 Packets: 0 Bytes: 0 States: 0 ]
@8 anchor "loopback" all
[ Evaluations: 71910 Packets: 0 Bytes: 0 States: 0 ]
@9 pass in quick on lo0 all label "pass loopback"
[ Evaluations: 71910 Packets: 0 Bytes: 0 States: 0 ]
@10 pass out quick on lo0 all label "pass loopback"
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
@11 anchor "packageearly" all
[ Evaluations: 71910 Packets: 0 Bytes: 0 States: 0 ]
@12 anchor "carp" all
[ Evaluations: 71910 Packets: 0 Bytes: 0 States: 0 ]
@13 pass quick inet proto icmp from 98.207.252.13 to any keep state
[ Evaluations: 71910 Packets: 11286 Bytes: 948024 States: 7 ]
@14 anchor "dhcpserverlan" all
[ Evaluations: 66834 Packets: 0 Bytes: 0 States: 0 ]
@15 pass in quick on ath0 inet proto udp from any port = bootpc to 255.255.255.255 port = bootps label "allow access to DHCP server on LAN"
[ Evaluations: 66834 Packets: 0 Bytes: 0 States: 0 ]
@16 pass in quick on ath0 inet proto udp from any port = bootpc to 192.168.1.1 port = bootps label "allow access to DHCP server on LAN"
[ Evaluations: 2 Packets: 2 Bytes: 656 States: 0 ]
@17 pass out quick on ath0 inet proto udp from 192.168.1.1 port = bootps to any port = bootpc label "allow access to DHCP server on LAN"
[ Evaluations: 16564 Packets: 2 Bytes: 656 States: 0 ]
@18 anchor "wandhcp" all
[ Evaluations: 66830 Packets: 0 Bytes: 0 States: 0 ]
@19 pass out quick on vr0 proto udp from any port = bootpc to any port = bootps label "allow dhcp client out wan"
[ Evaluations: 66830 Packets: 0 Bytes: 0 States: 0 ]
@20 block drop in log quick on vr0 inet proto udp from any port = bootps to 192.168.1.0/24 port = bootpc label "block dhcp client out wan"
[ Evaluations: 10262 Packets: 0 Bytes: 0 States: 0 ]
@21 pass in quick on vr0 proto udp from any port = bootps to any port = bootpc label "allow dhcp client out wan"
[ Evaluations: 174 Packets: 174 Bytes: 59852 States: 0 ]
@22 block drop in on ! ath0 inet from 192.168.1.0/24 to any
[ Evaluations: 62291 Packets: 0 Bytes: 0 States: 0 ]
@23 block drop in inet from 192.168.1.1 to any
[ Evaluations: 41393 Packets: 0 Bytes: 0 States: 0 ]
@24 block drop in on ! vr1 inet from 76.126.216.0/21 to any
[ Evaluations: 34099 Packets: 0 Bytes: 0 States: 0 ]
@25 block drop in inet from 76.126.222.74 to any
[ Evaluations: 34099 Packets: 0 Bytes: 0 States: 0 ]
@26 block drop in on ath0 inet6 from fe80::20b:6bff:fe09:f5c6 to any
[ Evaluations: 34099 Packets: 0 Bytes: 0 States: 0 ]
@27 block drop in on vr1 inet6 from fe80::20c:8eff:fe1a:130b to any
[ Evaluations: 12726 Packets: 0 Bytes: 0 States: 0 ]
@28 anchor "spoofing" all
[ Evaluations: 66656 Packets: 0 Bytes: 0 States: 0 ]
@29 anchor "spoofing" all
[ Evaluations: 66656 Packets: 0 Bytes: 0 States: 0 ]
@30 block drop in on ! vr0 inet from 98.207.252.0/23 to any
[ Evaluations: 66656 Packets: 0 Bytes: 0 States: 0 ]
@31 block drop in inet from 98.207.252.13 to any
[ Evaluations: 43842 Packets: 0 Bytes: 0 States: 0 ]
@32 block drop in on vr0 inet6 from fe80::20e:8eff:fe15:900a to any
[ Evaluations: 34099 Packets: 0 Bytes: 0 States: 0 ]
@33 block drop in log quick on vr0 inet from 10.0.0.0/8 to any label "block private networks from wan block 10/8"
[ Evaluations: 5723 Packets: 0 Bytes: 0 States: 0 ]
@34 block drop in log quick on vr0 inet from 127.0.0.0/8 to any label "block private networks from wan block 127/8"
[ Evaluations: 5723 Packets: 0 Bytes: 0 States: 0 ]
@35 block drop in log quick on vr0 inet from 172.16.0.0/12 to any label "block private networks from wan block 172.16/12"
[ Evaluations: 5723 Packets: 0 Bytes: 0 States: 0 ]
@36 block drop in log quick on vr0 inet from 192.168.0.0/16 to any label "block private networks from wan block 192.168/16"
[ Evaluations: 5723 Packets: 0 Bytes: 0 States: 0 ]
@37 anchor "limitingesr" all
[ Evaluations: 66656 Packets: 0 Bytes: 0 States: 0 ]
@38 block drop in quick from <virusprot:0> to any label "virusprot overload table"
[ Evaluations: 66656 Packets: 0 Bytes: 0 States: 0 ]
@39 pass out quick on ath0 proto icmp all keep state label "let out anything from firewall host itself"
[ Evaluations: 66656 Packets: 0 Bytes: 0 States: 0 ]
@40 pass out quick on vr0 proto icmp all keep state label "let out anything from firewall host itself"
[ Evaluations: 37989 Packets: 0 Bytes: 0 States: 0 ]
@41 pass out quick on vr0 all keep state label "let out anything from firewall host itself"
[ Evaluations: 17037 Packets: 151836 Bytes: 71806350 States: 149 ]
@42 anchor "firewallout" all
[ Evaluations: 56913 Packets: 0 Bytes: 0 States: 0 ]
@43 pass out quick on vr0 all keep state label "let out anything from firewall host itself"
[ Evaluations: 56913 Packets: 0 Bytes: 0 States: 0 ]
@44 pass out quick on ath0 all keep state label "let out anything from firewall host itself"
[ Evaluations: 51190 Packets: 1761289 Bytes: 1195125572 States: 96 ]
@45 pass out quick on vr1 all keep state label "let out anything from firewall host itself"
[ Evaluations: 22523 Packets: 116367 Bytes: 33010729 States: 160 ]
@46 pass out quick on ng1 all keep state label "let out anything from firewall host itself pptp"
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
@47 pass out quick on ng2 all keep state label "let out anything from firewall host itself pptp"
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
@48 pass out quick on ng3 all keep state label "let out anything from firewall host itself pptp"
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
@49 pass out quick on ng4 all keep state label "let out anything from firewall host itself pptp"
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
@50 pass out quick on ng5 all keep state label "let out anything from firewall host itself pptp"
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
@51 pass out quick on ng6 all keep state label "let out anything from firewall host itself pptp"
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
@52 pass out quick on ng7 all keep state label "let out anything from firewall host itself pptp"
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
@53 pass out quick on ng8 all keep state label "let out anything from firewall host itself pptp"
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
@54 pass out quick on ng9 all keep state label "let out anything from firewall host itself pptp"
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
@55 pass out quick on ng10 all keep state label "let out anything from firewall host itself pptp"
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
@56 pass out quick on ng11 all keep state label "let out anything from firewall host itself pptp"
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
@57 pass out quick on ng12 all keep state label "let out anything from firewall host itself pptp"
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
@58 pass out quick on ng13 all keep state label "let out anything from firewall host itself pptp"
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
@59 pass out quick on ng14 all keep state label "let out anything from firewall host itself pptp"
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
@60 pass out quick on ng15 all keep state label "let out anything from firewall host itself pptp"
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
@61 pass out quick on ng16 all keep state label "let out anything from firewall host itself pptp"
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
@62 pass out quick on enc0 all keep state label "IPSEC internal host to host"
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
@63 pass out quick on vr1 proto icmp all keep state label "let out anything from firewall host itself"
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
@64 pass out quick on vr1 all keep state label "let out anything from firewall host itself"
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
@65 anchor "anti-lockout" all
[ Evaluations: 34099 Packets: 0 Bytes: 0 States: 0 ]
@66 pass in quick on ath0 inet from any to 192.168.1.1 keep state label "anti-lockout web rule"
[ Evaluations: 34099 Packets: 66925 Bytes: 35390317 States: 3 ]
@67 anchor "pptp" all
[ Evaluations: 33563 Packets: 0 Bytes: 0 States: 0 ]
@68 pass in quick on vr0 inet proto gre from any to 98.207.252.13 keep state label "allow gre pptpd"
[ Evaluations: 33563 Packets: 0 Bytes: 0 States: 0 ]
@69 pass in quick on vr0 inet proto tcp from any to 98.207.252.13 port = pptp modulate state label "allow pptpd 98.207.252.13"
[ Evaluations: 5723 Packets: 0 Bytes: 0 States: 0 ]
@70 block drop in log proto tcp from <sshlockout:0> to any port = ssh label "sshlockout"
[ Evaluations: 32085 Packets: 0 Bytes: 0 States: 0 ]
@71 anchor "ftpproxy" all
[ Evaluations: 33563 Packets: 0 Bytes: 0 States: 0 ]
@72 anchor "pftpx/*" all
[ Evaluations: 33563 Packets: 0 Bytes: 0 States: 0 ]
@73 pass in quick on vr0 inet proto icmp from any to 98.207.252.13 keep state label "USER_RULE: Allow Ping reply"
[ Evaluations: 33563 Packets: 14 Bytes: 1984 States: 0 ]
@74 pass in log quick on vr0 inet proto tcp from any to 192.168.1.1 port = ssh keep state label "USER_RULE: NAT SSH -> pfsense"
[ Evaluations: 5709 Packets: 0 Bytes: 0 States: 0 ]
@75 pass in quick on vr0 inet proto tcp from any to 192.168.1.1 port = http keep state label "USER_RULE: NAT Web Config -> pfsense"
[ Evaluations: 2 Packets: 20 Bytes: 2150 States: 0 ]
@76 pass in log quick on vr0 inet proto tcp from any to 98.207.252.13 port = 1194 keep state label "USER_RULE: OpenVPN -> pfsense"
[ Evaluations: 4243 Packets: 0 Bytes: 0 States: 0 ]
@77 pass in quick on vr0 inet proto tcp from any to 192.168.1.2 port = 3389 keep state label "USER_RULE: NAT RDP -> Laptop"
[ Evaluations: 4243 Packets: 0 Bytes: 0 States: 0 ]
@78 pass in quick on vr0 inet proto tcp from any to 192.168.1.2 port = 45526 keep state label "USER_RULE: NAT BT -> Laptop"
[ Evaluations: 3067 Packets: 766549 Bytes: 506011545 States: 39 ]
@79 pass in log quick on vr0 inet proto tcp from any to 98.207.252.13 port = pptp keep state label "USER_RULE: PPTP"
[ Evaluations: 1176 Packets: 0 Bytes: 0 States: 0 ]
@80 pass in quick on ng1 inet from 192.168.1.192/28 to any keep state label "USER_RULE"
[ Evaluations: 30480 Packets: 0 Bytes: 0 States: 0 ]
@81 pass in quick on ng2 inet from 192.168.1.192/28 to any keep state label "USER_RULE"
[ Evaluations: 30480 Packets: 0 Bytes: 0 States: 0 ]
@82 pass in quick on ng3 inet from 192.168.1.192/28 to any keep state label "USER_RULE"
[ Evaluations: 30480 Packets: 0 Bytes: 0 States: 0 ]
@83 pass in quick on ng4 inet from 192.168.1.192/28 to any keep state label "USER_RULE"
[ Evaluations: 30480 Packets: 0 Bytes: 0 States: 0 ]
@84 pass in quick on ng5 inet from 192.168.1.192/28 to any keep state label "USER_RULE"
[ Evaluations: 30480 Packets: 0 Bytes: 0 States: 0 ]
@85 pass in quick on ng6 inet from 192.168.1.192/28 to any keep state label "USER_RULE"
[ Evaluations: 30480 Packets: 0 Bytes: 0 States: 0 ]
@86 pass in quick on ng7 inet from 192.168.1.192/28 to any keep state label "USER_RULE"
[ Evaluations: 30480 Packets: 0 Bytes: 0 States: 0 ]
@87 pass in quick on ng8 inet from 192.168.1.192/28 to any keep state label "USER_RULE"
[ Evaluations: 30480 Packets: 0 Bytes: 0 States: 0 ]
@88 pass in quick on ng9 inet from 192.168.1.192/28 to any keep state label "USER_RULE"
[ Evaluations: 30480 Packets: 0 Bytes: 0 States: 0 ]
@89 pass in quick on ng10 inet from 192.168.1.192/28 to any keep state label "USER_RULE"
[ Evaluations: 30480 Packets: 0 Bytes: 0 States: 0 ]
@90 pass in quick on ng11 inet from 192.168.1.192/28 to any keep state label "USER_RULE"
[ Evaluations: 30480 Packets: 0 Bytes: 0 States: 0 ]
@91 pass in quick on ng12 inet from 192.168.1.192/28 to any keep state label "USER_RULE"
[ Evaluations: 30480 Packets: 0 Bytes: 0 States: 0 ]
@92 pass in quick on ng13 inet from 192.168.1.192/28 to any keep state label "USER_RULE"
[ Evaluations: 30480 Packets: 0 Bytes: 0 States: 0 ]
@93 pass in quick on ng14 inet from 192.168.1.192/28 to any keep state label "USER_RULE"
[ Evaluations: 30480 Packets: 0 Bytes: 0 States: 0 ]
@94 pass in quick on ng15 inet from 192.168.1.192/28 to any keep state label "USER_RULE"
[ Evaluations: 30480 Packets: 0 Bytes: 0 States: 0 ]
@95 pass in quick on ng16 inet from 192.168.1.192/28 to any keep state label "USER_RULE"
[ Evaluations: 30480 Packets: 0 Bytes: 0 States: 0 ]
@96 pass in quick on vr1 reply-to (vr1 76.126.216.1) inet proto icmp from any to 76.126.222.74 keep state label "USER_RULE: Allow Ping reply"
[ Evaluations: 30480 Packets: 17 Bytes: 2140 States: 0 ]
@97 pass in quick on vr1 reply-to (vr1 76.126.216.1) inet proto tcp from any to 192.168.1.2 port = 45526 keep state label "USER_RULE: NAT BT -> Laptop"
[ Evaluations: 6988 Packets: 1474401 Bytes: 1004043858 States: 56 ]
@98 pass in quick on vr1 reply-to (vr1 76.126.216.1) inet proto tcp from any to 192.168.1.2 port = 3389 keep state label "USER_RULE: NAT RDP -> Laptop"
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
@99 pass in log quick on vr1 reply-to (vr1 76.126.216.1) inet proto tcp from any to 76.126.222.74 port = 1194 keep state label "USER_RULE: OpenVPN -> pfsense"
[ Evaluations: 699 Packets: 0 Bytes: 0 States: 0 ]
@100 pass in quick on vr1 reply-to (vr1 76.126.216.1) inet proto tcp from any to 192.168.1.1 port = http keep state label "USER_RULE: NAT Web Config -> pfsense"
[ Evaluations: 699 Packets: 0 Bytes: 0 States: 0 ]
@101 pass in log quick on vr1 reply-to (vr1 76.126.216.1) inet proto tcp from any to 192.168.1.1 port = ssh keep state label "USER_RULE: NAT SSH -> pfsense"
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
@102 pass in quick on ath0 inet proto tcp from any to 127.0.0.1 keep state label "USER_RULE"
[ Evaluations: 24176 Packets: 136 Bytes: 7168 States: 0 ]
@103 pass in quick on ath0 route-to (vr0 98.207.252.1) inet from 192.168.1.0/24 to 98.207.252.0/23 keep state label "USER_RULE: WAN DMZ"
[ Evaluations: 22893 Packets: 1 Bytes: 95 States: 0 ]
@104 pass in quick on ath0 route-to (vr1 76.126.216.1) inet from 192.168.1.0/24 to 76.126.216.0/21 keep state label "USER_RULE: WAN2 DMZ"
[ Evaluations: 19992 Packets: 0 Bytes: 0 States: 0 ]
@105 pass in quick on ath0 route-to (vr0 98.207.252.1) inet proto tcp from 192.168.1.0/24 to 192.168.100.1 port = 1337 keep state label "USER_RULE: Modem 1 -> WAN1"
[ Evaluations: 19992 Packets: 0 Bytes: 0 States: 0 ]
@106 pass in quick on ath0 route-to (vr0 98.207.252.1) inet proto tcp from 192.168.1.0/24 to 192.168.100.1 port = 1338 keep state label "USER_RULE: Modem 2 -> WAN2"
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
@107 pass in log quick on ath0 route-to (vr1 76.126.216.1) inet from 192.168.1.0/24 to <SurfboardHacker:3> keep state label "USER_RULE: SurfboardHacker -> WAN2"
[ Evaluations: 19992 Packets: 11610 Bytes: 2727209 States: 0 ]
@108 pass in quick on ath0 inet proto tcp from 192.168.1.0/24 to <vpns:0> port = https keep state label "NEGATE_ROUTE: Negate policy route for local network(s)"
[ Evaluations: 19065 Packets: 0 Bytes: 0 States: 0 ]
@109 pass in quick on ath0 route-to (vr0 98.207.252.1) inet proto tcp from 192.168.1.0/24 to any port = https keep state label "USER_RULE: HTTPS -> WAN1"
[ Evaluations: 10682 Packets: 1552 Bytes: 669951 States: 2 ]
@110 pass in log quick on ath0 inet proto gre from 192.168.1.0/24 to <vpns:0> keep state label "NEGATE_ROUTE: Negate policy route for local network(s)"
[ Evaluations: 19003 Packets: 0 Bytes: 0 States: 0 ]
@111 pass in log quick on ath0 route-to (vr0 98.207.252.1) inet proto gre from 192.168.1.0/24 to any keep state label "USER_RULE: GRE -> WAN1"
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
@112 pass in quick on ath0 inet from 192.168.1.0/24 to <vpns:0> keep state label "NEGATE_ROUTE: Negate policy route for local network(s)"
[ Evaluations: 19003 Packets: 0 Bytes: 0 States: 0 ]
@113 pass in quick on ath0 route-to { (vr0 98.207.252.1), (vr1 76.126.216.1) } round-robin inet from 192.168.1.0/24 to any keep state label "USER_RULE: Load Balance"
[ Evaluations: 19003 Packets: 240497 Bytes: 100162403 States: 297 ]
@114 pass in quick on ath0 inet proto tcp from any to 127.0.0.1 port = ftp-proxy keep state label "FTP PROXY: Allow traffic to localhost"
[ Evaluations: 836 Packets: 0 Bytes: 0 States: 0 ]
@115 pass in quick on ath0 inet proto tcp from any to 127.0.0.1 port = ftp keep state label "FTP PROXY: Allow traffic to localhost"
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
@116 pass in quick on vr0 inet proto tcp from any port = ftp-data to (vr0:1) port > 49000 user = 62 flags S/SA keep state label "FTP PROXY: PASV mode data connection"
[ Evaluations: 5403 Packets: 0 Bytes: 0 States: 0 ]
@117 pass in quick on vr1 inet proto tcp from any to 127.0.0.1 port = 8022 keep state label "FTP PROXY: Allow traffic to localhost"
[ Evaluations: 3939 Packets: 0 Bytes: 0 States: 0 ]
@118 pass in quick on vr1 inet proto tcp from any to 127.0.0.1 port = ftp keep state label "FTP PROXY: Allow traffic to localhost"
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
@119 anchor "imspector" all
[ Evaluations: 6239 Packets: 0 Bytes: 0 States: 0 ]
@120 anchor "miniupnpd" all
[ Evaluations: 6239 Packets: 0 Bytes: 0 States: 0 ]
@121 block drop in log quick all label "Default block all just to be sure."
[ Evaluations: 6239 Packets: 6239 Bytes: 594749 States: 0 ]
@122 block drop out log quick all label "Default block all just to be sure."
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]