summaryrefslogtreecommitdiff
path: root/dist/ipf/rules/example.9
blob: bd8941288c9293aae67afe21286e0dde8dc81d0e (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
#	$NetBSD: example.9,v 1.1.1.1 1999/12/11 22:24:12 veego Exp $
#
# drop all packets without IP security options
#
block in all
pass in all with opt sec
#
# only allow packets in and out on le0 which are top secret
#
block out on le1 all
pass out on le1 all with opt sec-class topsecret
block in on le1 all
pass in on le1 all with opt sec-class topsecret