su-2.05b# cat /etc/firewall.conf
flush
add 00100 allow ip from any to any via lo0
#DNS
add 00101 pass tcp from any to 82.193.96.6 53 setup
add 00102 pass udp from any to 82.193.96.6 53
add 00103 pass udp from 82.193.96.6 53 to any
#WWW
add 00400 allow tcp from any 80 to me
add 00500 allow tcp from me to any 80
#IRC
add 00600 allow tcp from me to 62.244.14.14 6667 via rl0
add 00700 allow tcp from 62.244.14.14 6667 to me
#SSH
add 01000 allow tcp from any to me 443
add 01100 pass tcp from me 443 to any
#ICQ
add 01200 pass tcp from me to any 443
add 01300 pass tcp from any 443 to me
add 01400 pass tcp from me to 64.12.25.102 5190
add 01500 pass tcp from 64.12.25.102 5190 to me
#ICQ
#add 1790 pass tcp from
#add 1800 pass tcp from 85.91.123.133 to me 443 check state
#add 1900 pass
#add 2100 pass tcp from me to 64.12.25.102 5190
#add 2100 pass tcp from 64.12.25.102 5190 to me
#SSH
add 2000 pass tcp from any to any established
add 2100 pass tcp from any to any
add 65535 deny ip from any to any