FreeBSD＋IPFILTER实现整网（N个Vlan）透明代理上网(4) pass in quick on em1 proto tcp from 10.0.40.0/24 to any port = 22 flags S keep state group 2 block in quick on em1 proto tcp from any to any port = 22 flags S keep state group 2 pass in quick on em1 proto tcp from any to any keep state group 2 pass in quick on em1 proto udp from any to any keep state group 2 pass in quick on em1 proto icmp from any to any keep state group 2 block in quick on em1 all group 2
################################################################# # Outside Interface ################################################################# #---------------------------------------------------------------- #Block out all traffic to the private address #---------------------------------------------------------------- block out quick on em0 all head 11 block out quick on em0 from any to 192.168.0.0/16 group 11 block out quick on em0 from any to 172.16.0.0/12 group 11 block out quick on em0 from any to 10.0.0.0/8 group 11 block out quick on em0 from any to 127.0.0.0/8 group 11 block out quick on em0 from any to 0.0.0.0/8 group 11 block out quick on em0 from any to 169.254.0.0/16 group 11
