|
|
@@ -0,0 +1,34 @@
|
|
|
+set skip on lo0
|
|
|
+pass out quick all
|
|
|
+scrub in all
|
|
|
+
|
|
|
+antispoof for lo0
|
|
|
+table <fail2ban> persist
|
|
|
+
|
|
|
+block in all
|
|
|
+block in quick from <fail2ban>
|
|
|
+#pass in quick inet proto icmp all
|
|
|
+#pass in quick inet6 proto icmp6 all
|
|
|
+
|
|
|
+pass in quick inet proto tcp from any to any port 22 keep state
|
|
|
+pass in quick inet proto tcp from any to any port 80 keep state
|
|
|
+pass in quick inet proto tcp from any to any port 443 keep state
|
|
|
+pass in quick inet proto tcp from any to any port 5060 keep state
|
|
|
+pass in quick inet proto udp from any to any port 5060 keep state
|
|
|
+pass in quick inet proto tcp from any to any port 5080 keep state
|
|
|
+pass in quick inet proto udp from any to any port 5080 keep state
|
|
|
+pass in quick inet proto udp from any to any port 16384:32768 keep state
|
|
|
+
|
|
|
+
|
|
|
+
|
|
|
+
|
|
|
+
|
|
|
+
|
|
|
+
|
|
|
+
|
|
|
+
|
|
|
+
|
|
|
+
|
|
|
+
|
|
|
+
|
|
|
+
|
FusionPBX