freebsd ipfw配置

                                                                =============================================
options IPFIREWALL options IPFIREWALL_VERBOSE options IPFIREWALL_VERBOSE_LIMIT=100 options IPSTEALTH options ACCEPT_FILTER_DATA options ACCEPT_FILTER_HTTP options DUMMYNET
___________________________________________________
# filter scan baradd 00001 deny log ip from any to any ipoptions rradd 00002 deny log ip from any to any ipoptions tsadd 00003 deny log ip from any to any ipoptions ssrradd 00004 deny log ip from any to any ipoptions lsrradd 00005 deny tcp from any to any in tcpflags syn,fin# tcpadd 10003 allow tcp from any to any 21,22,80 inadd 19997 check-stateadd 19998 allow tcp from any to any out keep-state setupadd 19999 allow tcp from any to any out# udpadd 20000 allow udp from any 53 to any inadd 29999 allow udp from any to any out# icmpadd 30000 allow icmp from any to any icmptypes 3,4add 30000 allow icmp from any to any icmptypes 8 outadd 30000 allow icmp from any to any icmptypes 0,11 in
               
               
               
               
               
               
               
               
               
               
               

本文来自ChinaUnix博客，如果查看原文请点：http://blog.chinaunix.net/u/2326/showart_416564.html

标签：

版权申明：本站文章部分自网络，如有侵权，请联系：west999com@outlook.com
特别注意：本站所有转载文章言论不代表本站观点，本站所提供的摄影照片，插画，设计作品，如需使用，请与原作者联系，版权归原作者所有