freebsd-11-stable/etc/rc.firewall

85 	${fwcmd} add 100 pass all from any to any via lo0
103 	${fwcmd} add pass ipv6-icmp from :: to ff02::/16
105 	${fwcmd} add pass ipv6-icmp from fe80::/10 to fe80::/10
106 	${fwcmd} add pass ipv6-icmp from fe80::/10 to ff02::/16
109 	${fwcmd} add pass ipv6-icmp from any to any icmp6types 1
112 	${fwcmd} add pass ipv6-icmp from any to any icmp6types 2,135,136
192 # ${fwcmd} add 65000 pass all from any to any
199 	${fwcmd} add 65000 pass all from any to any
217 	${fwcmd} add pass all from ${net} to 255.255.255.255
220 	${fwcmd} add pass all from me to ${net}
221 	${fwcmd} add pass all from ${net} to me
223 		${fwcmd} add pass all from me to ${net6}
224 		${fwcmd} add pass all from ${net6} to me
229 		${fwcmd} add pass all from fe80::/10 to ff02::/16
230 		${fwcmd} add pass all from ${net6} to ff02::/16
232 		${fwcmd} add pass udp from fe80::/10 to me 546
236 	${fwcmd} add pass tcp from any to any established
238 	# Allow IP fragments to pass through
239 	${fwcmd} add pass all from any to any frag
242 	${fwcmd} add pass tcp from any to me 25 setup
245 	${fwcmd} add pass tcp from me to any setup
251 	${fwcmd} add pass udp from me to any 53 keep-state
254 	${fwcmd} add pass udp from me to any 123 keep-state
386 	${fwcmd} add pass tcp from any to any established
388 	# Allow IP fragments to pass through
389 	${fwcmd} add pass all from any to any frag
392 	${fwcmd} add pass tcp from any to me 25 setup
395 	${fwcmd} add pass tcp from any to me 53 setup
396 	${fwcmd} add pass udp from any to me 53
397 	${fwcmd} add pass udp from me 53 to any
400 	${fwcmd} add pass tcp from any to me 80 setup
410 	${fwcmd} add pass tcp from any to any setup
413 	${fwcmd} add pass udp from me to any 53 keep-state
416 	${fwcmd} add pass udp from me to any 123 keep-state
447 	${fwcmd} add pass tcp  from me to any established
450 	${fwcmd} add pass tcp  from me to any setup keep-state
451 	${fwcmd} add pass udp  from me to any       keep-state
452 	${fwcmd} add pass icmp from me to any       keep-state
454 		${fwcmd} add pass ipv6-icmp from me to any keep-state
458 	${fwcmd} add pass udp  from 0.0.0.0 68 to 255.255.255.255 67 out
459 	${fwcmd} add pass udp  from any 67     to me 68 in
460 	${fwcmd} add pass udp  from any 67     to 255.255.255.255 68 in
462 		${fwcmd} add pass udp from fe80::/10 to me 546 in
466 	${fwcmd} add pass icmp from any to any icmptype 8
468 		${fwcmd} add pass ipv6-icmp from any to any icmp6type 128,129
472 	${fwcmd} add pass icmp from any to any icmptype 3,4,11
474 		${fwcmd} add pass ipv6-icmp from any to any icmp6type 3
492 	      ${fwcmd} add pass ${j%/[Pp][Rr][Oo][Tt][Oo]} from $i to me
495 	      ${fwcmd} add pass tcp from $i to me ${j%/[Tt][Cc][Pp]}
498 	      ${fwcmd} add pass udp from $i to me ${j%/[Uu][Dd][Pp]}
503 	      ${fwcmd} add pass tcp from $i to me $j
516 	  ${fwcmd} add pass ip from $i to me