| /freebsd-14.2/sbin/pfctl/tests/files/ |
| H A D | pf0047.ok | 1 pass in on lo0 all flags S/SA keep state
2 pass in all flags S/SA keep state label "any"
3 pass in on lo0 all flags S/SA keep state label "lo0"
4 pass in on lo0 all flags S/SA keep state label "lo0lo0"
5 pass in on lo0 all flags S/SA keep state label "any"
6 pass in on lo0 inet all flags S/SA keep state label "any"
35 pass in on lo0 all flags S/SA keep state label "xx"
47 pass in on lo0 all flags S/SA keep state
51 pass in on lo0 all flags S/SA keep state label "ip"
52 pass in on lo0 proto esp all keep state label "esp"
[all …]
|
| H A D | pf0081.ok | 3 pass inet6 from (lo0) to ::1 flags S/SA keep state
4 pass inet6 from (lo0) to ::2 flags S/SA keep state
5 pass inet6 from (lo0) to ::3 flags S/SA keep state
9 pass from <foo> to <bar1> flags S/SA keep state
10 pass from <foo> to <bar2> flags S/SA keep state
11 pass from <foo> to <bar3> flags S/SA keep state
12 pass inet6 from <foo> to ::1 flags S/SA keep state
13 pass inet6 from <foo> to ::2 flags S/SA keep state
18 pass from <foo> to <bar1> flags S/SA keep state
19 pass from <foo> to <bar2> flags S/SA keep state
[all …]
|
| H A D | pf0087.in | 3 pass in on lo1000000 proto tcp from any to 10.0.0.2 port 22 keep state
4 pass in on lo1000001 proto tcp from 10.0.0.1 port 22 to 10.0.0.2 keep state
6 pass in on lo1000000 proto udp from any to 10.0.0.2 port 53 keep state
7 pass in proto tcp to 10.0.0.1 port 80 keep state
9 pass in proto tcp to 10.0.0.3 port 80 keep state
10 pass out proto tcp to 10.0.0.1 port 81 keep state
11 pass in proto udp to 10.0.0.3 port 53 keep state
13 pass out proto udp to 10.0.0.1 port 53 keep state
15 pass out proto udp to 10.0.0.3 port 53 keep state
21 pass out proto tcp to 10.0.0.1 port 80 keep state
[all …]
|
| H A D | pf0087.ok | 1 pass in on lo1000000 inet proto tcp from any to 10.0.0.2 port = ssh flags S/SA keep state
4 pass in on lo1000000 inet proto udp from any to 10.0.0.2 port = domain keep state
5 pass in inet proto tcp from any to 10.0.0.1 port = http flags S/SA keep state
6 pass out on lo1000001 inet proto udp from any to 10.0.0.2 port = domain keep state
7 pass in inet proto tcp from any to 10.0.0.3 port = http flags S/SA keep state
8 pass out inet proto tcp from any to 10.0.0.1 port = 81 flags S/SA keep state
9 pass in inet proto udp from any to 10.0.0.3 port = domain keep state
11 pass out inet proto udp from any to 10.0.0.1 port = domain keep state
13 pass out inet proto udp from any to 10.0.0.3 port = domain keep state
20 pass in inet proto udp from any to 10.0.0.1 port = domain keep state
[all …]
|
| H A D | pf0088.ok | 1 pass in on lo1000000 inet from any to 10.0.0.1 flags S/SA keep state
3 pass all flags S/SA keep state
4 pass out all flags S/SA keep state
5 pass out all flags S/SA keep state
6 pass out quick all flags S/SA keep state
10 pass inet from any to 10.0.0.2 flags S/SA keep state
17 pass out all flags S/SA keep state
18 pass in all flags S/SA keep state
19 pass in on lo1000001 all flags S/SA keep state
20 pass in on lo1000001 all flags S/SA keep state
[all …]
|
| H A D | pf0082.ok | 1 pass inet from (lo0) to any flags S/SA keep state
2 pass inet from ! (lo0) to any flags S/SA keep state
3 pass inet from (lo0) to any flags S/SA keep state
4 pass inet6 from (lo0) to any flags S/SA keep state
5 pass from <foo> to any flags S/SA keep state
6 pass from ! <foo> to any flags S/SA keep state
7 pass from <foo> to any flags S/SA keep state
8 pass inet from <bar> to any flags S/SA keep state
9 pass from <bar> to any flags S/SA keep state
11 pass from <foo> to any flags S/SA keep state
[all …]
|
| H A D | pf0102.ok | 1 pass inet from 1.1.1.1 to (self) flags S/SA keep state
2 pass inet6 from 2002:: to (self) flags S/SA keep state
3 pass inet6 from 2002:: to (self) flags S/SA keep state
4 pass inet from 1.1.1.1 to (self) flags S/SA keep state
5 pass inet from 1.1.1.1 to (self) flags S/SA keep state
6 pass inet6 from 2002:: to (self)/40 flags S/SA keep state
7 pass inet6 from 2002:: to (self)/40 flags S/SA keep state
8 pass inet from 1.1.1.1 to (self) flags S/SA keep state
|
| H A D | pf0040.ok | 4 pass all flags S/SA keep state
11 pass in all flags S/SA keep state
12 pass out all flags S/SA keep state
14 pass on lo0 all flags S/SA keep state
16 pass proto tcp all flags S/SA keep state
17 pass proto udp all keep state
18 pass in proto udp all keep state
19 pass out proto udp all keep state
20 pass out on lo0 proto tcp from any to any port = smtp flags S/SA keep state
|
| H A D | pf0003.ok | 1 pass in all flags S/SA keep state
2 pass in all flags S/SA keep state
6 pass in proto udp all keep state
7 pass in proto icmp all keep state
8 pass in proto tcp all flags S/SA keep state
11 pass in all flags any keep state
12 pass in all flags S/SA keep state
13 pass in all flags S/SA keep state
|
| H A D | pf0060.ok | 1 pass inet from 224.4.5.4 to any flags S/SA keep state
2 pass inet from 224.4.0.0/16 to any flags S/SA keep state
3 pass inet from 224.4.5.0/26 to any flags S/SA keep state
4 pass inet from 224.4.5.64/26 to any flags S/SA keep state
5 pass inet from 224.4.5.128/26 to any flags S/SA keep state
6 pass inet from 224.4.5.192/26 to any flags S/SA keep state
7 pass inet from 224.4.5.4 to any flags S/SA keep state
|
| H A D | pf0011.ok | 1 pass in inet proto icmp all icmp-type echorep keep state
2 pass in inet proto icmp all icmp-type echorep code 0 keep state
3 pass in inet proto icmp all icmp-type 1 keep state
4 pass in inet proto icmp all icmp-type 1 code 1 keep state
5 pass in inet6 proto ipv6-icmp all icmp6-type 0 keep state
6 pass in inet6 proto ipv6-icmp all icmp6-type 0 code 0 keep state
7 pass in inet6 proto ipv6-icmp all icmp6-type unreach keep state
8 pass in inet6 proto ipv6-icmp all icmp6-type unreach code admin-unr keep state
17 pass in inet proto icmp all icmp-type unreach code needfrag keep state
18 pass in inet6 proto ipv6-icmp all icmp6-type timex code reassemb keep state
|
| H A D | pf0039.ok | 10 o_keep = "keep state "
15 pass in log quick on lo0 inet proto tcp all tos 0x08 keep state fragment label "blah"
16 …t proto tcp all user = 3 group = 65534 flags S/SA tos 0x08 set ( prio 2 ) keep state allow-opts la…
17 … inet proto tcp all user = 3 group = 0 flags S/SA tos 0x08 set ( prio 2 ) keep state allow-opts la…
18 …t proto tcp all user = 0 group = 65534 flags S/SA tos 0x08 set ( prio 2 ) keep state allow-opts la…
19 … inet proto tcp all user = 0 group = 0 flags S/SA tos 0x08 set ( prio 2 ) keep state allow-opts la…
20 pass in log quick on lo0 inet proto icmp all icmp-type echorep code 0 set ( prio 2 ) keep state lab…
21 pass in log quick on lo0 inet proto tcp all flags S/SA keep state
22 pass in log quick on lo0 inet proto tcp all flags S/SA tos 0x08 set ( prio 2 ) keep state label "bl…
23 pass in log quick on lo0 inet proto icmp all icmp-type echorep code 0 tos 0x08 keep state
[all …]
|
| H A D | pf0001.ok | 1 pass in all flags S/SA keep state
3 pass in proto tcp from any port <= 1024 to any flags S/SA keep state label "foo_bar"
4 pass in proto tcp from any to any port = smtp flags S/SA keep state
5 pass in inet proto tcp from 10.0.0.0/8 port > 1024 to ! 10.1.2.3 port != ssh flags S/SA keep state
6 pass in inet proto igmp from 10.0.0.0/8 to 10.1.1.1 keep state allow-opts
7 pass in inet proto tcp from 1.2.3.4 to any flags S/SA keep state label "6:tcp:1.2.3.4::any:"
8 pass in inet proto tcp from 1.2.3.5 to any flags S/SA keep state label "7:tcp:1.2.3.5::any:"
|
| H A D | pf0085.ok | 1 pass inet from 127.0.0.1 to any flags S/SA keep state tag 127.0.0.1
2 pass inet from 127.0.0.2 to any flags S/SA keep state tag 127.0.0.2
3 pass inet from 127.0.0.3 to any flags S/SA keep state tag 127.0.0.3
4 pass inet from 127.0.0.1 to any flags S/SA keep state tagged 127.0.0.1
5 pass inet from 127.0.0.2 to any flags S/SA keep state tagged 127.0.0.2
6 pass inet from 127.0.0.3 to any flags S/SA keep state tagged 127.0.0.3
|
| H A D | pf0032.ok | 1 pass in inet from 10.0.0.0/8 to any flags S/SA keep state
2 pass in inet from 10.0.0.0/8 to any flags S/SA keep state
3 pass in inet from 192.168.37.0/25 to any flags S/SA keep state
4 pass in inet from 192.168.37.0/24 to any flags S/SA keep state
5 pass in inet from 192.168.0.0/16 to any flags S/SA keep state
6 pass in inet from 192.0.0.0/8 to any flags S/SA keep state
|
| H A D | pf0002.in | 22 pass out on tun1000000 inet proto icmp all icmp-type 8 code 0 keep state
23 pass in on tun1000000 inet proto icmp all icmp-type 8 code 0 keep state
25 pass out on tun1000000 proto udp all keep state
27 pass in on tun1000000 proto udp from any to any port = domain keep state
29 pass out on tun1000000 proto tcp all keep state
31 pass in on tun1000000 proto tcp from any to any port = ssh keep state
32 pass in on tun1000000 proto tcp from any to any port = smtp keep state
33 pass in on tun1000000 proto tcp from any to any port = domain keep state
34 pass in on tun1000000 proto tcp from any to any port = auth keep state
|
| H A D | pf0104.ok | 1 pass in proto tcp from any to any port = smtp flags S/SA keep state divert-to 8025
2 pass in proto tcp from any to any port = smtp flags S/SA keep state divert-to 8025
3 pass in inet proto tcp from any to any port = smtp flags S/SA keep state divert-to 8025
4 pass in inet proto tcp from any to any port = smtp flags S/SA keep state divert-to 8025
5 pass in proto tcp from any to any port = smtp flags S/SA keep state divert-to 8025
6 pass in inet6 proto tcp from any to any port = smtp flags S/SA keep state divert-to 8025
7 pass in inet6 proto tcp from any to any port = smtp flags S/SA keep state divert-to 8025
|
| H A D | pf0048.ok | 4 pass in from <regress> to any flags S/SA keep state
5 pass out from any to <regress> flags S/SA keep state
6 pass in from <regress.1> to any flags S/SA keep state
7 pass in from <regress.2> to any flags S/SA keep state
8 pass out from any to ! <regress.1> flags S/SA keep state
9 pass out from any to ! <regress.2> flags S/SA keep state
|
| /freebsd-14.2/contrib/netbsd-tests/ipf/regress/ |
| H A D | i11 | 1 pass in on ed0 proto tcp from localhost to localhost port = telnet keep state
2 block in log first on lo0 proto tcp/udp from any to any port = echo keep state
3 pass in proto udp from localhost to localhost port = 20499 keep frag
4 pass in proto udp from localhost to localhost port = 2049 keep frag(strict)
5 pass in proto udp from localhost to localhost port = 53 keep state keep frags
6 pass in on ed0 out-via vx0 proto udp from any to any keep state
7 pass out on ppp0 in-via le0 proto tcp from any to any keep state
8 pass in on ed0,vx0 out-via vx0,ed0 proto udp from any to any keep state
9 pass in proto tcp from any port gt 1024 to localhost port eq 1024 keep state
11 pass in proto tcp all flags S keep state(loose,newisn,no-icmp-err,limit 101,age 600)
[all …]
|
| H A D | f13 | 1 pass in proto tcp from any to any port = 25 flags S/SA keep frags
2 block in proto tcp from any to any port = 25 flags S/SA keep frags
3 pass in proto udp from any to any port = 53 keep frags
4 block in proto udp from any to any port = 53 keep frags
5 pass in proto tcp from any to any port = 25 flags S/SA keep state keep frags
6 block in proto tcp from any to any port = 25 flags S/SA keep state keep frags
7 pass in proto udp from any to any port = 53 keep frags(strict)
8 pass in proto tcp from any to any port = 25 keep state(strict)
9 pass in proto tcp from any to any port = 25 keep state(loose)
|
| H A D | f11 | 1 pass in proto tcp from any to any port = 23 flags S/SA keep state
2 block in proto tcp from any to any port = 23 flags S/SA keep state
3 pass in proto udp from any to any port = 53 keep frags
4 block in proto udp from any to any port = 53 keep frags
5 pass in proto udp from any to any port = 53 keep state
6 block in proto udp from any to any port = 53 keep state
7 pass in on e0 proto tcp from any to any port = 25 keep state
|
| /freebsd-14.2/contrib/netbsd-tests/ipf/expected/ |
| H A D | i11 | 1 pass in on ed0(!) inet proto tcp from 127.0.0.1/32 to 127.0.0.1/32 port = 23 keep state # count 0
2 block in log first on lo0(!) proto tcp/udp from any to any port = 7 keep state # count 0
3 pass in inet proto udp from 127.0.0.1/32 to 127.0.0.1/32 port = 20499 keep frags
4 pass in inet proto udp from 127.0.0.1/32 to 127.0.0.1/32 port = 2049 keep frags (strict)
5 pass in inet proto udp from 127.0.0.1/32 to 127.0.0.1/32 port = 53 keep state keep frags # count 0
6 pass in on ed0(!) out-via vx0(!) proto udp from any to any keep state # count 0
7 pass out on ppp0(!) in-via le0(!) proto tcp from any to any keep state # count 0
8 pass in on ed0(!),vx0(!) out-via vx0(!),ed0(!) proto udp from any to any keep state # count 0
9 pass in inet proto tcp from any port > 1024 to 127.0.0.1/32 port = 1024 keep state # count 0
11 pass in proto tcp from any to any flags S/FSRPAU keep state (limit 101,loose,newisn,no-icmp-err,age…
[all …]
|
| /freebsd-14.2/sys/contrib/device-tree/src/arm/ |
| H A D | aspeed-bmc-ibm-rainier.dts | 1275 default-state = "keep";
1283 default-state = "keep";
1291 default-state = "keep";
1299 default-state = "keep";
1307 default-state = "keep";
1315 default-state = "keep";
1323 default-state = "keep";
1331 default-state = "keep";
1349 default-state = "keep";
1357 default-state = "keep";
[all …]
|
| H A D | aspeed-bmc-ibm-everest.dts | 870 default-state = "keep";
878 default-state = "keep";
886 default-state = "keep";
894 default-state = "keep";
902 default-state = "keep";
910 default-state = "keep";
918 default-state = "keep";
926 default-state = "keep";
934 default-state = "keep";
942 default-state = "keep";
[all …]
|
| /freebsd-14.2/share/examples/ipfilter/rules/ |
| H A D | BASIC_1.FW | 60 pass in quick proto udp from any to any port = 53 keep state group 202
70 pass in quick proto tcp from any to any port = ftp keep state group 201
71 pass in quick proto tcp from any to any port = ftp-data keep state group 201
76 pass in quick proto udp from any to any port = ntp keep state group 202
80 pass in quick proto tcp from any to any port = 22 keep state group 201
81 pass in quick proto tcp from any to any port = telnet keep state group 201
82 pass in quick proto tcp from any to any port = www keep state group 201
89 pass in log quick proto tcp from any to any port = smtp keep state group 110
90 pass in log quick proto tcp from any to any port = www keep state group 110
91 pass in log quick proto tcp from any to any port = 53 keep state group 110
[all …]
|