libexec/rc/rc.firewall

84 	${fwcmd} add 100 pass all from any to any via lo0
102 	${fwcmd} add pass ipv6-icmp from :: to ff02::/16
104 	${fwcmd} add pass ipv6-icmp from fe80::/10 to fe80::/10
105 	${fwcmd} add pass ipv6-icmp from fe80::/10 to ff02::/16
108 	${fwcmd} add pass ipv6-icmp from any to any icmp6types 1
111 	${fwcmd} add pass ipv6-icmp from any to any icmp6types 2,135,136
191 # ${fwcmd} add 65000 pass all from any to any
198 	${fwcmd} add 65000 pass all from any to any
216 	${fwcmd} add pass all from ${net} to 255.255.255.255
219 	${fwcmd} add pass all from me to ${net}
220 	${fwcmd} add pass all from ${net} to me
222 		${fwcmd} add pass all from me to ${net6}
223 		${fwcmd} add pass all from ${net6} to me
225 		${fwcmd} add pass all from fe80::/10 to ff02::/16
226 		${fwcmd} add pass all from ${net6} to ff02::/16
228 		${fwcmd} add pass udp from fe80::/10 to me 546
232 	${fwcmd} add pass tcp from any to any established
234 	# Allow IP fragments to pass through
235 	${fwcmd} add pass all from any to any frag
238 	${fwcmd} add pass tcp from any to me 25 setup
241 	${fwcmd} add pass tcp from me to any setup
247 	${fwcmd} add pass udp from me to any 53 keep-state
250 	${fwcmd} add pass udp from me to any 123 keep-state
382 	${fwcmd} add pass tcp from any to any established
384 	# Allow IP fragments to pass through
385 	${fwcmd} add pass all from any to any frag
388 	${fwcmd} add pass tcp from any to me 25 setup
391 	${fwcmd} add pass tcp from any to me 53 setup
392 	${fwcmd} add pass udp from any to me 53
393 	${fwcmd} add pass udp from me 53 to any
396 	${fwcmd} add pass tcp from any to me 80 setup
406 	${fwcmd} add pass tcp from any to any setup
409 	${fwcmd} add pass udp from me to any 53 keep-state
412 	${fwcmd} add pass udp from me to any 123 keep-state
443 	${fwcmd} add pass tcp  from me to any established
446 	${fwcmd} add pass tcp  from me to any setup keep-state
447 	${fwcmd} add pass udp  from me to any       keep-state
448 	${fwcmd} add pass icmp from me to any       keep-state
450 		${fwcmd} add pass ipv6-icmp from me to any keep-state
454 	${fwcmd} add pass udp  from 0.0.0.0 68 to 255.255.255.255 67 out
455 	${fwcmd} add pass udp  from any 67     to me 68 in
456 	${fwcmd} add pass udp  from any 67     to 255.255.255.255 68 in
458 		${fwcmd} add pass udp from fe80::/10 to me 546 in
462 	${fwcmd} add pass icmp from any to any icmptype 8
464 		${fwcmd} add pass ipv6-icmp from any to any icmp6type 128,129
468 	${fwcmd} add pass icmp from any to any icmptype 3,4,11
470 		${fwcmd} add pass ipv6-icmp from any to any icmp6type 3
488 	      ${fwcmd} add pass ${j%/[Pp][Rr][Oo][Tt][Oo]} from $i to me
491 	      ${fwcmd} add pass tcp from $i to me ${j%/[Tt][Cc][Pp]}
494 	      ${fwcmd} add pass udp from $i to me ${j%/[Uu][Dd][Pp]}
499 	      ${fwcmd} add pass tcp from $i to me $j
512 	  ${fwcmd} add pass ip from $i to me