xref: /openbsd/regress/sbin/pfctl/pf7.optimized (revision 7c27da25)
1d431a5bfSmcbride@0 block drop out log on tun1000000 all
2d431a5bfSmcbride  [ Skip steps: i=end f=6 p=2 sa=6 sp=end da=7 dp=15 ]
3d431a5bfSmcbride  [ queue: qname= qid=0 pqname= pqid=0 ]
4d431a5bfSmcbride  [ Evaluations: 0         Packets: 0         Bytes: 0           States: 0     ]
5d431a5bfSmcbride@1 block drop in log on tun1000000 all
6d431a5bfSmcbride  [ Skip steps: i=end f=6 sa=6 sp=end da=7 dp=15 ]
7d431a5bfSmcbride  [ queue: qname= qid=0 pqname= pqid=0 ]
8d431a5bfSmcbride  [ Evaluations: 0         Packets: 0         Bytes: 0           States: 0     ]
9d431a5bfSmcbride@2 block return-rst out log on tun1000000 proto tcp all
10d431a5bfSmcbride  [ Skip steps: i=end f=6 p=4 sa=6 sp=end da=7 dp=15 ]
11d431a5bfSmcbride  [ queue: qname= qid=0 pqname= pqid=0 ]
12d431a5bfSmcbride  [ Evaluations: 0         Packets: 0         Bytes: 0           States: 0     ]
13d431a5bfSmcbride@3 block return-rst in log on tun1000000 proto tcp all
14d431a5bfSmcbride  [ Skip steps: i=end f=6 sa=6 sp=end da=7 dp=15 ]
15d431a5bfSmcbride  [ queue: qname= qid=0 pqname= pqid=0 ]
16d431a5bfSmcbride  [ Evaluations: 0         Packets: 0         Bytes: 0           States: 0     ]
17d431a5bfSmcbride@4 block return-icmp(port-unr, port-unr) out log on tun1000000 proto udp all
18d431a5bfSmcbride  [ Skip steps: i=end f=6 p=6 sa=6 sp=end da=7 dp=15 ]
19d431a5bfSmcbride  [ queue: qname= qid=0 pqname= pqid=0 ]
20d431a5bfSmcbride  [ Evaluations: 0         Packets: 0         Bytes: 0           States: 0     ]
21d431a5bfSmcbride@5 block return-icmp(port-unr, port-unr) in log on tun1000000 proto udp all
22d431a5bfSmcbride  [ Skip steps: i=end sp=end da=7 dp=15 ]
23d431a5bfSmcbride  [ queue: qname= qid=0 pqname= pqid=0 ]
24d431a5bfSmcbride  [ Evaluations: 0         Packets: 0         Bytes: 0           States: 0     ]
25d431a5bfSmcbride@6 block drop out log quick on tun1000000 inet from ! 157.161.48.183 to any
26d431a5bfSmcbride  [ Skip steps: i=end f=13 p=12 sp=end dp=15 ]
27d431a5bfSmcbride  [ queue: qname= qid=0 pqname= pqid=0 ]
28d431a5bfSmcbride  [ Evaluations: 0         Packets: 0         Bytes: 0           States: 0     ]
29d431a5bfSmcbride@7 block drop in quick on tun1000000 inet from any to 255.255.255.255
30d431a5bfSmcbride  [ Skip steps: i=end d=12 f=13 p=12 sp=end dp=15 ]
31d431a5bfSmcbride  [ queue: qname= qid=0 pqname= pqid=0 ]
32d431a5bfSmcbride  [ Evaluations: 0         Packets: 0         Bytes: 0           States: 0     ]
33d431a5bfSmcbride@8 block drop in log quick on tun1000000 inet from 10.0.0.0/8 to any
34d431a5bfSmcbride  [ Skip steps: i=end d=12 f=13 p=12 sp=end da=end dp=15 ]
35d431a5bfSmcbride  [ queue: qname= qid=0 pqname= pqid=0 ]
36d431a5bfSmcbride  [ Evaluations: 0         Packets: 0         Bytes: 0           States: 0     ]
37d431a5bfSmcbride@9 block drop in log quick on tun1000000 inet from 172.16.0.0/12 to any
38d431a5bfSmcbride  [ Skip steps: i=end d=12 f=13 p=12 sp=end da=end dp=15 ]
39d431a5bfSmcbride  [ queue: qname= qid=0 pqname= pqid=0 ]
40d431a5bfSmcbride  [ Evaluations: 0         Packets: 0         Bytes: 0           States: 0     ]
41d431a5bfSmcbride@10 block drop in log quick on tun1000000 inet from 192.168.0.0/16 to any
42d431a5bfSmcbride  [ Skip steps: i=end d=12 f=13 p=12 sp=end da=end dp=15 ]
43d431a5bfSmcbride  [ queue: qname= qid=0 pqname= pqid=0 ]
44d431a5bfSmcbride  [ Evaluations: 0         Packets: 0         Bytes: 0           States: 0     ]
45d431a5bfSmcbride@11 block drop in log quick on tun1000000 inet from 255.255.255.255 to any
46d431a5bfSmcbride  [ Skip steps: i=end f=13 sp=end da=end dp=15 ]
47d431a5bfSmcbride  [ queue: qname= qid=0 pqname= pqid=0 ]
48d431a5bfSmcbride  [ Evaluations: 0         Packets: 0         Bytes: 0           States: 0     ]
49d431a5bfSmcbride@12 pass out on tun1000000 inet proto icmp all icmp-type echoreq code 0 keep state
50d431a5bfSmcbride  [ Skip steps: i=end d=14 sa=end sp=end da=end dp=15 ]
51d431a5bfSmcbride  [ queue: qname= qid=0 pqname= pqid=0 ]
52d431a5bfSmcbride  [ Evaluations: 0         Packets: 0         Bytes: 0           States: 0     ]
53d431a5bfSmcbride@13 pass out on tun1000000 proto udp all keep state
54d431a5bfSmcbride  [ Skip steps: i=end sa=end sp=end da=end dp=15 ]
55d431a5bfSmcbride  [ queue: qname= qid=0 pqname= pqid=0 ]
56d431a5bfSmcbride  [ Evaluations: 0         Packets: 0         Bytes: 0           States: 0     ]
57d431a5bfSmcbride@14 pass in on tun1000000 inet proto icmp all icmp-type echoreq code 0 keep state
58d431a5bfSmcbride  [ Skip steps: i=end d=16 sa=end sp=end da=end ]
59d431a5bfSmcbride  [ queue: qname= qid=0 pqname= pqid=0 ]
60d431a5bfSmcbride  [ Evaluations: 0         Packets: 0         Bytes: 0           States: 0     ]
61d431a5bfSmcbride@15 pass in on tun1000000 proto udp from any to any port = domain keep state
62d431a5bfSmcbride  [ Skip steps: i=end f=end sa=end sp=end da=end ]
63d431a5bfSmcbride  [ queue: qname= qid=0 pqname= pqid=0 ]
64d431a5bfSmcbride  [ Evaluations: 0         Packets: 0         Bytes: 0           States: 0     ]
65*7c27da25Smcbride@16 pass out on tun1000000 proto tcp all flags S/SA modulate state
66d431a5bfSmcbride  [ Skip steps: i=end f=end p=18 sa=end sp=end da=end dp=22 ]
67d431a5bfSmcbride  [ queue: qname= qid=0 pqname= pqid=0 ]
68d431a5bfSmcbride  [ Evaluations: 0         Packets: 0         Bytes: 0           States: 0     ]
69*7c27da25Smcbride@17 pass in on tun1000000 proto tcp all flags S/SA modulate state
70d431a5bfSmcbride  [ Skip steps: i=end d=end f=end sa=end sp=end da=end dp=22 ]
71d431a5bfSmcbride  [ queue: qname= qid=0 pqname= pqid=0 ]
72d431a5bfSmcbride  [ Evaluations: 0         Packets: 0         Bytes: 0           States: 0     ]
73d431a5bfSmcbride@18 pass in on tun1000000 proto udp all keep state
74d431a5bfSmcbride  [ Skip steps: i=end d=end f=end sa=end sp=end da=end dp=22 ]
75d431a5bfSmcbride  [ queue: qname= qid=0 pqname= pqid=0 ]
76d431a5bfSmcbride  [ Evaluations: 0         Packets: 0         Bytes: 0           States: 0     ]
77d431a5bfSmcbride@19 pass in on tun1000000 proto icmp all keep state
78d431a5bfSmcbride  [ Skip steps: i=end d=end f=end sa=end sp=end da=end dp=22 ]
79d431a5bfSmcbride  [ queue: qname= qid=0 pqname= pqid=0 ]
80d431a5bfSmcbride  [ Evaluations: 0         Packets: 0         Bytes: 0           States: 0     ]
81d431a5bfSmcbride@20 pass in on tun1000000 proto tcp all flags S/SA synproxy state
82d431a5bfSmcbride  [ Skip steps: i=end d=end f=end sa=end sp=end da=end dp=22 ]
83d431a5bfSmcbride  [ queue: qname= qid=0 pqname= pqid=0 ]
84d431a5bfSmcbride  [ Evaluations: 0         Packets: 0         Bytes: 0           States: 0     ]
85d431a5bfSmcbride@21 pass in on tun1000000 proto icmp all keep state
86d431a5bfSmcbride  [ Skip steps: i=end d=end f=end sa=end sp=end da=end ]
87d431a5bfSmcbride  [ queue: qname= qid=0 pqname= pqid=0 ]
88d431a5bfSmcbride  [ Evaluations: 0         Packets: 0         Bytes: 0           States: 0     ]
89*7c27da25Smcbride@22 pass in on tun1000000 proto tcp from any to any port = ssh flags S/SA modulate state
90d431a5bfSmcbride  [ Skip steps: i=end d=end f=end p=end sa=end sp=end da=end ]
91d431a5bfSmcbride  [ queue: qname= qid=0 pqname= pqid=0 ]
92d431a5bfSmcbride  [ Evaluations: 0         Packets: 0         Bytes: 0           States: 0     ]
93*7c27da25Smcbride@23 pass in on tun1000000 proto tcp from any to any port = smtp flags S/SA modulate state
94d431a5bfSmcbride  [ Skip steps: i=end d=end f=end p=end sa=end sp=end da=end ]
95d431a5bfSmcbride  [ queue: qname= qid=0 pqname= pqid=0 ]
96d431a5bfSmcbride  [ Evaluations: 0         Packets: 0         Bytes: 0           States: 0     ]
97*7c27da25Smcbride@24 pass in on tun1000000 proto tcp from any to any port = domain flags S/SA modulate state
98d431a5bfSmcbride  [ Skip steps: i=end d=end f=end p=end sa=end sp=end da=end ]
99d431a5bfSmcbride  [ queue: qname= qid=0 pqname= pqid=0 ]
100d431a5bfSmcbride  [ Evaluations: 0         Packets: 0         Bytes: 0           States: 0     ]
101*7c27da25Smcbride@25 pass in on tun1000000 proto tcp from any to any port = auth flags S/SA modulate state
102d431a5bfSmcbride  [ Skip steps: i=end d=end f=end p=end sa=end sp=end da=end dp=end ]
103d431a5bfSmcbride  [ queue: qname= qid=0 pqname= pqid=0 ]
104d431a5bfSmcbride  [ Evaluations: 0         Packets: 0         Bytes: 0           States: 0     ]
105