19 lines
322 B
Plaintext
19 lines
322 B
Plaintext
# TODO: Allow in ICMP(v6) by message type
|
|
# TODO: Rate-limit ssh
|
|
|
|
$services = { mdns, ssh }
|
|
|
|
group "localhost" in on lo0 {
|
|
pass stateful all
|
|
}
|
|
|
|
group default {
|
|
# Default rule
|
|
block all
|
|
|
|
pass stateful in proto { tcp, udp } to any port $services
|
|
|
|
# Let it goooooo
|
|
pass stateful out all
|
|
}
|