example.7 revision 1.1
1# $NetBSD: example.7,v 1.1 2012/03/23 21:20:15 christos Exp $ 2# block all ICMP packets. 3# 4block in proto icmp all 5# 6# allow in ICMP echos and echo-replies. 7# 8pass in on le1 proto icmp from any to any icmp-type echo 9pass in on le1 proto icmp from any to any icmp-type echorep 10# 11# block all ICMP destination unreachable packets which are port-unreachables 12# 13block in on le1 proto icmp from any to any icmp-type unreach code 3 14