Lines Matching refs:fwcmd
85 ${fwcmd} add 100 pass all from any to any via lo0
86 ${fwcmd} add 200 deny all from any to 127.0.0.0/8
87 ${fwcmd} add 300 deny ip from 127.0.0.0/8 to any
89 ${fwcmd} add 400 deny all from any to ::1
90 ${fwcmd} add 500 deny all from ::1 to any
103 ${fwcmd} add pass ipv6-icmp from :: to ff02::/16
105 ${fwcmd} add pass ipv6-icmp from fe80::/10 to fe80::/10
106 ${fwcmd} add pass ipv6-icmp from fe80::/10 to ff02::/16
109 ${fwcmd} add pass ipv6-icmp from any to any icmp6types 1
112 ${fwcmd} add pass ipv6-icmp from any to any icmp6types 2,135,136
137 fwcmd="/sbin/ipfw -q"
140 fwcmd="/sbin/ipfw"
147 ${fwcmd} -f flush
166 ${fwcmd} add 50 divert natd ip4 from any to any via ${natd_interface}
179 ${fwcmd} nat 123 config log ${firewall_nat_flags}
180 ${fwcmd} add 50 nat 123 ip4 from any to any via ${firewall_nat_interface}
199 ${fwcmd} add 65000 pass all from any to any
217 ${fwcmd} add pass all from ${net} to 255.255.255.255
220 ${fwcmd} add pass all from me to ${net}
221 ${fwcmd} add pass all from ${net} to me
223 ${fwcmd} add pass all from me to ${net6}
224 ${fwcmd} add pass all from ${net6} to me
226 ${fwcmd} add pass all from fe80::/10 to ff02::/16
227 ${fwcmd} add pass all from ${net6} to ff02::/16
229 ${fwcmd} add pass udp from fe80::/10 to me 546
233 ${fwcmd} add pass tcp from any to any established
236 ${fwcmd} add pass all from any to any frag
239 ${fwcmd} add pass tcp from any to me 25 setup
242 ${fwcmd} add pass tcp from me to any setup
245 ${fwcmd} add deny tcp from any to any setup
248 ${fwcmd} add pass udp from me to any 53 keep-state
251 ${fwcmd} add pass udp from me to any 123 keep-state
289 ${fwcmd} add deny all from ${inet} to any in via ${oif}
290 ${fwcmd} add deny all from ${onet} to any in via ${iif}
292 ${fwcmd} add deny all from ${inet6} to any in via ${oif6}
294 ${fwcmd} add deny all from ${onet6} to any in \
301 ${fwcmd} table ${BAD_ADDR_TBL} flush
302 ${fwcmd} table ${BAD_ADDR_TBL} add 10.0.0.0/8
303 ${fwcmd} table ${BAD_ADDR_TBL} add 172.16.0.0/12
304 ${fwcmd} table ${BAD_ADDR_TBL} add 192.168.0.0/16
309 ${fwcmd} table ${BAD_ADDR_TBL} add 0.0.0.0/8
310 ${fwcmd} table ${BAD_ADDR_TBL} add 169.254.0.0/16
311 ${fwcmd} table ${BAD_ADDR_TBL} add 192.0.2.0/24
312 ${fwcmd} table ${BAD_ADDR_TBL} add 224.0.0.0/4
313 ${fwcmd} table ${BAD_ADDR_TBL} add 240.0.0.0/4
315 ${fwcmd} add deny all from any to "table($BAD_ADDR_TBL)" via ${oif}
327 ${fwcmd} add divert natd ip4 from any to any via ${natd_interface}
332 ${fwcmd} add deny all from "table($BAD_ADDR_TBL)" to any via ${oif}
335 ${fwcmd} add deny all from fc00::/7 to any via ${oif6}
336 ${fwcmd} add deny all from any to fc00::/7 via ${oif6}
339 ${fwcmd} add deny all from fec0::/10 to any via ${oif6}
340 ${fwcmd} add deny all from any to fec0::/10 via ${oif6}
343 ${fwcmd} add deny all from ::ffff:0.0.0.0/96 to any \
345 ${fwcmd} add deny all from any to ::ffff:0.0.0.0/96 \
349 ${fwcmd} add deny all from ::224.0.0.0/100 to any via ${oif6}
350 ${fwcmd} add deny all from any to ::224.0.0.0/100 via ${oif6}
351 ${fwcmd} add deny all from ::127.0.0.0/104 to any via ${oif6}
352 ${fwcmd} add deny all from any to ::127.0.0.0/104 via ${oif6}
353 ${fwcmd} add deny all from ::0.0.0.0/104 to any via ${oif6}
354 ${fwcmd} add deny all from any to ::0.0.0.0/104 via ${oif6}
355 ${fwcmd} add deny all from ::255.0.0.0/104 to any via ${oif6}
356 ${fwcmd} add deny all from any to ::255.0.0.0/104 via ${oif6}
358 ${fwcmd} add deny all from ::0.0.0.0/96 to any via ${oif6}
359 ${fwcmd} add deny all from any to ::0.0.0.0/96 via ${oif6}
362 ${fwcmd} add deny all from 2002:e000::/20 to any via ${oif6}
363 ${fwcmd} add deny all from any to 2002:e000::/20 via ${oif6}
364 ${fwcmd} add deny all from 2002:7f00::/24 to any via ${oif6}
365 ${fwcmd} add deny all from any to 2002:7f00::/24 via ${oif6}
366 ${fwcmd} add deny all from 2002:0000::/24 to any via ${oif6}
367 ${fwcmd} add deny all from any to 2002:0000::/24 via ${oif6}
368 ${fwcmd} add deny all from 2002:ff00::/24 to any via ${oif6}
369 ${fwcmd} add deny all from any to 2002:ff00::/24 via ${oif6}
371 ${fwcmd} add deny all from 2002:0a00::/24 to any via ${oif6}
372 ${fwcmd} add deny all from any to 2002:0a00::/24 via ${oif6}
373 ${fwcmd} add deny all from 2002:ac10::/28 to any via ${oif6}
374 ${fwcmd} add deny all from any to 2002:ac10::/28 via ${oif6}
375 ${fwcmd} add deny all from 2002:c0a8::/32 to any via ${oif6}
376 ${fwcmd} add deny all from any to 2002:c0a8::/32 via ${oif6}
378 ${fwcmd} add deny all from ff05::/16 to any via ${oif6}
379 ${fwcmd} add deny all from any to ff05::/16 via ${oif6}
383 ${fwcmd} add pass tcp from any to any established
386 ${fwcmd} add pass all from any to any frag
389 ${fwcmd} add pass tcp from any to me 25 setup
392 ${fwcmd} add pass tcp from any to me 53 setup
393 ${fwcmd} add pass udp from any to me 53
394 ${fwcmd} add pass udp from me 53 to any
397 ${fwcmd} add pass tcp from any to me 80 setup
400 ${fwcmd} add deny log ip4 from any to any in via ${oif} setup proto tcp
402 ${fwcmd} add deny log ip6 from any to any in via ${oif6} \
407 ${fwcmd} add pass tcp from any to any setup
410 ${fwcmd} add pass udp from me to any 53 keep-state
413 ${fwcmd} add pass udp from me to any 123 keep-state
441 ${fwcmd} add check-state
444 ${fwcmd} add pass tcp from me to any established
447 ${fwcmd} add pass tcp from me to any setup keep-state
448 ${fwcmd} add pass udp from me to any keep-state
449 ${fwcmd} add pass icmp from me to any keep-state
451 ${fwcmd} add pass ipv6-icmp from me to any keep-state
455 ${fwcmd} add pass udp from 0.0.0.0 68 to 255.255.255.255 67 out
456 ${fwcmd} add pass udp from any 67 to me 68 in
457 ${fwcmd} add pass udp from any 67 to 255.255.255.255 68 in
459 ${fwcmd} add pass udp from fe80::/10 to me 546 in
463 ${fwcmd} add pass icmp from any to any icmptype 8
465 ${fwcmd} add pass ipv6-icmp from any to any icmp6type 128,129
469 ${fwcmd} add pass icmp from any to any icmptype 3,4,11
471 ${fwcmd} add pass ipv6-icmp from any to any icmp6type 3
489 ${fwcmd} add pass ${j%/[Pp][Rr][Oo][Tt][Oo]} from $i to me
492 ${fwcmd} add pass tcp from $i to me ${j%/[Tt][Cc][Pp]}
495 ${fwcmd} add pass udp from $i to me ${j%/[Uu][Dd][Pp]}
500 ${fwcmd} add pass tcp from $i to me $j
513 ${fwcmd} add pass ip from $i to me
516 ${fwcmd} add 65000 count ip from any to any
520 ${fwcmd} add deny { tcp or udp } from any to any $i in
524 ${fwcmd} add deny ip from any to 255.255.255.255
525 ${fwcmd} add deny ip from any to 224.0.0.0/24 in # XXX
528 ${fwcmd} add deny udp from any to any 520 in
533 ${fwcmd} add deny tcp from any 80,443 to any 1024-65535 in
541 ${fwcmd} add deny $log ip from any to any
545 ${fwcmd} add 65000 deny ip from any to any
551 ${fwcmd} ${firewall_flags} ${firewall_type}