This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision | ||
tech:freebsd:start [2018/06/21 08:03] admin |
tech:freebsd:start [2018/08/11 21:58] (current) rk4n3 |
||
---|---|---|---|
Line 26: | Line 26: | ||
* tightvnc | * tightvnc | ||
* terminator | * terminator | ||
+ | |||
+ | ==== Typical Firewall ==== | ||
+ | To re-read the firewall rules: ''pfctl -f /etc/pf.conf'' \\ | ||
+ | In ''/etc/pf.conf'': \\ | ||
+ | <code> | ||
+ | # SSH, DNS, HTTP, HTTPS, IRC, Murmur | ||
+ | tcp_pass = "{ 22 53 80 443 7000 64738 }" | ||
+ | # DNS, XDMCP, Murmur | ||
+ | udp_pass = "{ 53 177 64738 }" | ||
+ | # SSH tunnels | ||
+ | tcp_ssh = "{ 12224 22012 }" | ||
+ | # Bitlbee and Eggdrop | ||
+ | tcp_irc = "{ 6667 7667 }" | ||
+ | # VNC | ||
+ | tcp_vnc = "{ 5800:5801 5900:5901 6000:6001 }" | ||
+ | table <emailers> { 24.159.210.154,24.159.210.156,24.159.210.157 } | ||
+ | block all | ||
+ | pass in proto tcp from <emailers> to port 25 keep state | ||
+ | pass in proto tcp to port $tcp_pass keep state | ||
+ | pass in proto udp to port $udp_pass keep state | ||
+ | pass in from 192.168.0.0/24 | ||
+ | pass out all | ||
+ | </code> | ||
===== Misc Tech Trivia ===== | ===== Misc Tech Trivia ===== |