1*6de4d5d5SDarren Reed# augmented rules generated by mkfilters 2*6de4d5d5SDarren Reedblock in log quick from any with ipopts 3*6de4d5d5SDarren Reedblock in log quick proto tcp from any to any with short 4*6de4d5d5SDarren Reedblock in log quick all with opt lsrr 5*6de4d5d5SDarren Reedblock in log quick all with opt ssrr 6*6de4d5d5SDarren Reed#------------------------------------------------------- 7*6de4d5d5SDarren Reed# loopback pakets left unmolested 8*6de4d5d5SDarren Reedpass in quick on lo0 all 9*6de4d5d5SDarren Reedpass out quick on lo0 all 10*6de4d5d5SDarren Reed#------------------------------------------------------- 11*6de4d5d5SDarren Reedpass out on ed1 all head 150 12*6de4d5d5SDarren Reedblock out from 127.0.0.0/8 to any group 150 13*6de4d5d5SDarren Reedblock out from any to 127.0.0.0/8 group 150 14*6de4d5d5SDarren Reedblock out from any to 192.168.1.110/32 group 150 15*6de4d5d5SDarren Reed#------------------------------------------------------- 16*6de4d5d5SDarren Reedpass in on ed1 all head 100 17*6de4d5d5SDarren Reedblock in from 127.0.0.0/8 to any group 100 18*6de4d5d5SDarren Reedblock in from 192.168.1.110/32 to any group 100 19*6de4d5d5SDarren Reedblock in from 192.168.0.1/24 to any group 100 20*6de4d5d5SDarren Reed#------------------------------------------------------- 21*6de4d5d5SDarren Reedpass out on fxp0 all head 250 22*6de4d5d5SDarren Reedblock out from 127.0.0.0/8 to any group 250 23*6de4d5d5SDarren Reedblock out from any to 127.0.0.0/8 group 250 24*6de4d5d5SDarren Reedblock out from any to 192.168.0.1/32 group 250 25*6de4d5d5SDarren Reed#------------------------------------------------------- 26*6de4d5d5SDarren Reedpass in on fxp0 all head 200 27*6de4d5d5SDarren Reedblock in from 127.0.0.0/8 to any group 200 28*6de4d5d5SDarren Reedblock in from 192.168.0.1/32 to any group 200 29*6de4d5d5SDarren Reedblock in from 192.168.1.110/24 to any group 200 30