| # |
| # block all inbound packets. |
| # |
| block in from any to any |
| # |
| # pass through packets to and from localhost. |
| # |
| pass in from 127.0.0.1/32 to 127.0.0.1/32 |
| # |
| # allow a variety of individual hosts to send any type of IP packet to any |
| # other host. |
| # |
| pass in from 10.1.3.1/32 to any |
| pass in from 10.1.3.2/32 to any |
| pass in from 10.1.3.3/32 to any |
| pass in from 10.1.3.4/32 to any |
| pass in from 10.1.3.5/32 to any |
| pass in from 10.1.0.13/32 to any |
| pass in from 10.1.1.1/32 to any |
| pass in from 10.1.2.1/32 to any |
| # |
| # |
| # block all outbound packets. |
| # |
| block out from any to any |
| # |
| # allow any packets destined for localhost out. |
| # |
| pass out from any to 127.0.0.1/32 |
| # |
| # allow any host to send any IP packet out to a limited number of hosts. |
| # |
| pass out from any to 10.1.3.1/32 |
| pass out from any to 10.1.3.2/32 |
| pass out from any to 10.1.3.3/32 |
| pass out from any to 10.1.3.4/32 |
| pass out from any to 10.1.3.5/32 |
| pass out from any to 10.1.0.13/32 |
| pass out from any to 10.1.1.1/32 |
| pass out from any to 10.1.2.1/32 |