freebsd-11.0-release/etc/rc.firewall

48 #   closed      - totally disables IP services except via lo0 interface
85 	${fwcmd} add 100 pass all from any to any via lo0
158 			${fwcmd} add 50 divert natd ip4 from any to any via ${natd_interface}
172 			${fwcmd} add 50 nat 123 ip4 from any to any via ${firewall_nat_interface}
284 	${fwcmd} add deny all from ${inet} to any in via ${oif}
285 	${fwcmd} add deny all from ${onet} to any in via ${iif}
287 		${fwcmd} add deny all from ${inet6} to any in via ${oif6}
290 			    via ${iif6}
310 	${fwcmd} add deny all from any to "table($BAD_ADDR_TBL)" via ${oif}
322 			${fwcmd} add divert natd ip4 from any to any via ${natd_interface}
327 	${fwcmd} add deny all from "table($BAD_ADDR_TBL)" to any via ${oif}
330 		${fwcmd} add deny all from fc00::/7 to any via ${oif6}
331 		${fwcmd} add deny all from any to fc00::/7 via ${oif6}
334 		${fwcmd} add deny all from fec0::/10 to any via ${oif6}
335 		${fwcmd} add deny all from any to fec0::/10 via ${oif6}
339 		    via ${oif6}
341 		    via ${oif6}
344 		${fwcmd} add deny all from ::224.0.0.0/100 to any via ${oif6}
345 		${fwcmd} add deny all from any to ::224.0.0.0/100 via ${oif6}
346 		${fwcmd} add deny all from ::127.0.0.0/104 to any via ${oif6}
347 		${fwcmd} add deny all from any to ::127.0.0.0/104 via ${oif6}
348 		${fwcmd} add deny all from ::0.0.0.0/104 to any via ${oif6}
349 		${fwcmd} add deny all from any to ::0.0.0.0/104 via ${oif6}
350 		${fwcmd} add deny all from ::255.0.0.0/104 to any via ${oif6}
351 		${fwcmd} add deny all from any to ::255.0.0.0/104 via ${oif6}
353 		${fwcmd} add deny all from ::0.0.0.0/96 to any via ${oif6}
354 		${fwcmd} add deny all from any to ::0.0.0.0/96 via ${oif6}
357 		${fwcmd} add deny all from 2002:e000::/20 to any via ${oif6}
358 		${fwcmd} add deny all from any to 2002:e000::/20 via ${oif6}
359 		${fwcmd} add deny all from 2002:7f00::/24 to any via ${oif6}
360 		${fwcmd} add deny all from any to 2002:7f00::/24 via ${oif6}
361 		${fwcmd} add deny all from 2002:0000::/24 to any via ${oif6}
362 		${fwcmd} add deny all from any to 2002:0000::/24 via ${oif6}
363 		${fwcmd} add deny all from 2002:ff00::/24 to any via ${oif6}
364 		${fwcmd} add deny all from any to 2002:ff00::/24 via ${oif6}
366 		${fwcmd} add deny all from 2002:0a00::/24 to any via ${oif6}
367 		${fwcmd} add deny all from any to 2002:0a00::/24 via ${oif6}
368 		${fwcmd} add deny all from 2002:ac10::/28 to any via ${oif6}
369 		${fwcmd} add deny all from any to 2002:ac10::/28 via ${oif6}
370 		${fwcmd} add deny all from 2002:c0a8::/32 to any via ${oif6}
371 		${fwcmd} add deny all from any to 2002:c0a8::/32 via ${oif6}
373 		${fwcmd} add deny all from ff05::/16 to any via ${oif6}
374 		${fwcmd} add deny all from any to ff05::/16 via ${oif6}
395 	${fwcmd} add deny log ip4 from any to any in via ${oif} setup proto tcp
397 		${fwcmd} add deny log ip6 from any to any in via ${oif6} \