一个简单的ipf配置文件

#pass out quick on lo0
#pass in quick on lo0
pass in quick on ce0 proto tcp from any to any port = 80 flags S keep state
#pass in quick on ce0 proto tcp from any to any port = 10000 flags S keep state
pass in quick on ce0 proto tcp from any to 59.175.238.72/32 port = 21 flags S keep state
pass in quick on ce0 proto tcp from any to any port = 20 flags S keep state
pass out quick on ce0 from any to any port = 53 keep state
pass in quick on ce0 proto tcp from any to any port = 25 flags S keep state
pass out quick on ce0 proto tcp from any to any port = 25 keep state
pass out quick on ce0 proto tcp from any to any port = 25 flags S keep state
pass in quick on ce0 proto tcp from any to any port = 25 keep state
pass out quick on ce0 proto tcp from any to any port = 110 flags S keep state
pass in quick on ce0 proto tcp from any to any port = 110 keep state
pass in quick on ce0 proto tcp from any to any port = 110 flags S keep state
pass out quick on ce0 proto tcp from any to any port = 110 keep state
pass in quick on ce0 proto tcp from any to any port = 3306 flags S keep state
pass in quick on ce0 proto tcp from any to any port = 22 flags S keep state
pass in quick on ce0 proto tcp from any to any port = 8801 flags S keep state
pass in quick on ce0 proto tcp from any to any port = 8089 flags S keep state
pass in quick on ce0 proto tcp from any to any port = 8973 flags S keep state
pass in quick on ce0 proto tcp from any to any port = 23 flags S keep state
pass in quick on xl2 proto tcp from any to any port=143
#pass out quick on ce0 proto tcp from 59.175.238.72/32 to any port = 110 flags S keep state
pass out quick on ce0 proto tcp from 59.175.238.72/32 to any port = 21 keep state
pass out quick on ce0 proto tcp from any to any port = 20 keep state
pass out quick on ce0 proto tcp from any to any port = 22 keep state
pass out quick on ce0 proto tcp from any to any port = 80 keep state
#pass out quick on ce0 proto tcp from any to any port = 10000 keep state
pass out quick on ce0 proto tcp from any to any port = 3306 keep state
pass out quick on ce0 proto tcp from any to any port = 8801 keep state
pass out quick on ce0 proto tcp from any to any port = 8089 keep state
pass out quick on ce0 proto tcp from any to any flags S keep state
pass in quick on ce0 proto icmp from any to any icmp-type 0
pass in quick on ce0 proto icmp from any to any icmp-type 11
#block in quick on ce0 proto udp from any to any port 33434 >< 33465
#pass in all
pass out quick all
block in all
#pass out all
#block out all[@more@]

来自 “ ITPUB博客 ” ，链接：http://blog.itpub.net/197458/viewspace-1007295/，如需转载，请注明出处，否则将追究法律责任。

转载于:http://blog.itpub.net/197458/viewspace-1007295/