xref: /netbsd-src/external/bsd/ipf/dist/rules/example.8 (revision bc4097aacfdd9307c19b7947c13c6ad6982527a9)
1*bc4097aaSchristos#	$NetBSD: example.8,v 1.1.1.1 2012/03/23 21:20:15 christos Exp $
2*bc4097aaSchristos#
3*bc4097aaSchristos# block all incoming TCP connections but send back a TCP-RST for ones to
4*bc4097aaSchristos# the ident port
5*bc4097aaSchristos#
6*bc4097aaSchristosblock in proto tcp from any to any flags S/SA
7*bc4097aaSchristosblock return-rst in quick proto tcp from any to any port = 113 flags S/SA
8*bc4097aaSchristos#
9*bc4097aaSchristos# block all inbound UDP packets and send back an ICMP error.
10*bc4097aaSchristos#
11*bc4097aaSchristosblock return-icmp in proto udp from any to any
12