forked from norman/fusionpbx-install.sh-github-mirror
Update pf.conf
This commit is contained in:
@@ -1,14 +1,16 @@
|
|||||||
set skip on lo0
|
set skip on lo0
|
||||||
pass out quick all
|
|
||||||
scrub in all
|
scrub in all
|
||||||
|
|
||||||
antispoof for lo0
|
antispoof for lo0
|
||||||
table <fail2ban> persist
|
table <fail2ban> persist
|
||||||
|
|
||||||
|
pass out quick all
|
||||||
|
pass quick on lo0 all
|
||||||
|
|
||||||
block in all
|
block in all
|
||||||
block in quick from <fail2ban>
|
block in quick from <fail2ban>
|
||||||
#pass in quick inet proto icmp all
|
pass in quick inet proto icmp all
|
||||||
#pass in quick inet6 proto icmp6 all
|
pass in quick inet6 proto icmp6 all
|
||||||
|
|
||||||
pass in quick inet proto tcp from any to any port 22 keep state
|
pass in quick inet proto tcp from any to any port 22 keep state
|
||||||
pass in quick inet proto tcp from any to any port 80 keep state
|
pass in quick inet proto tcp from any to any port 80 keep state
|
||||||
@@ -18,17 +20,3 @@ pass in quick inet proto udp from any to any port 5060 keep state
|
|||||||
pass in quick inet proto tcp from any to any port 5080 keep state
|
pass in quick inet proto tcp from any to any port 5080 keep state
|
||||||
pass in quick inet proto udp from any to any port 5080 keep state
|
pass in quick inet proto udp from any to any port 5080 keep state
|
||||||
pass in quick inet proto udp from any to any port 16384:32768 keep state
|
pass in quick inet proto udp from any to any port 16384:32768 keep state
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user