summaryrefslogtreecommitdiff
path: root/external/bsd/ipf/dist/rules/tcpstate
blob: 339a25f963fc8d9a3250bbafd8b0b599d63fd004 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
#
# Only allow TCP packets in/out of le0 if there is an outgoing connection setup
# somewhere, waiting for it.
#
pass out quick on le0 proto tcp from any to any flags S/SAFR keep state
block out on le0 proto tcp all
block in on le0 proto tcp all
#
# allow nameserver queries and replies to pass through, but no other UDP
#
pass out quick on le0 proto udp from any to any port = 53 keep state
block out on le0 proto udp all
block in on le0 proto udp all
n>import GCC 8.3. it includes these new features:mrg 2019-01-19import GCC 7.4.0. main changes include:mrg 2018-02-02import GCC 6.4.0. see this url for details which are too large tomrg 2014-03-01import GCC 4.8 branch at r206687.mrg 2011-06-21initial import of GCC 4.5.3 sources. changes since 4.1 are way too numerousmrg