( csiga | 2006. 02. 06., h – 17:12 )

Ha alapból nem mehet semmi:

block return-rst in log proto tcp from any to any port = 113
pass in quick proto tcp from any to FIXIP/32 port = 21 keep state
pass in quick proto tcp from any to FIXIP/32 port = 22 keep state
pass in quick proto tcp from any to FIXIP/32 port = 80 keep state
pass out quick on rl0 proto udp from any to any keep state
pass out quick on rl0 proto tcp from any to any keep state
pass out quick on rl0 proto icmp from any to any keep state
pass out quick on lo0 proto udp from any to any keep state
pass out quick on lo0 proto tcp from any to any keep state
pass out quick on lo0 proto icmp from any to any keep state

Ha alapból mehet minden:

block in log proto tcp from any to any
block in log proto udp from any to any
block in log proto icmp from any to any
block return-rst in log proto tcp from any to any port = 113
pass in quick proto tcp from any to FIXIP/32 port = 21 keep state
pass in quick proto tcp from any to FIXIP/32 port = 22 keep state
pass in quick proto tcp from any to FIXIP/32 port = 80 keep state
pass out quick on rl0 proto udp from any to any keep state
pass out quick on rl0 proto tcp from any to any keep state
pass out quick on rl0 proto icmp from any to any keep state
pass out quick on lo0 proto udp from any to any keep state
pass out quick on lo0 proto tcp from any to any keep state
pass out quick on lo0 proto icmp from any to any keep state