00100 24120 2721600 allow ip from any to any via lo0 00110 0 0 deny ip from any to 127.0.0.0/8 00120 10402 3300436 deny ip from any to any not verrevpath in 00301 97147 6404747 deny ip from 10.0.0.0/8 to any in via vx0 00302 31 2076 deny ip from 172.16.0.0/12 to any in via vx0 00303 2 168 allow ip from 192.168.100.1 to any in via vx0 00304 0 0 deny ip from 192.168.0.0/16 to any in via vx0 00400 15 720 allow tcp from any to any dst-port 20 out via vx0 setup keep-state 00401 27 1296 allow tcp from any to any dst-port 21 out via vx0 setup keep-state 00402 0 0 allow icmp from any to any out via vx0 setup keep-state 00800 0 0 pipe 1 tcp from any to 10.1.0.0/24 dst-port 6881-6890 out via em0 00801 0 0 pipe 1 tcp from any to 10.1.0.0/24 src-port 6881-6890 in via em0 00802 0 0 pipe 1 tcp from any to 10.1.0.0/24 dst-port 6346-6350 out via em0 00803 0 0 pipe 1 tcp from any to 10.1.0.0/24 src-port 6346-6350 in via em0 01000 110251300 101854995965 divert 8668 ip from any to me in via vx0 01001 0 0 check-state 04000 194395 27705060 allow tcp from 10.1.0.0/24 to me dst-port 22 in via em0 setup keep-state 04001 4541 283177 allow icmp from 10.1.0.0/24 to me in via em0 04002 0 0 allow tcp from 10.1.0.0/24 to me dst-port 123 in via em0 setup keep-state 04003 0 0 allow udp from 10.1.0.0/24 to me dst-port 123 in via em0 keep-state 04004 16 780 allow tcp from 10.1.0.0/24 to me dst-port 80 in via em0 04005 155 9808 allow tcp from 10.1.0.0/24 to me dst-port 53 in via em0 04006 141836 9992055 allow udp from 10.1.0.0/24 to me dst-port 53 in via em0 04007 0 0 allow tcp from 10.1.0.0/24 to me dst-port 137 in via em0 04008 0 0 allow tcp from 10.1.0.0/24 to me dst-port 138 in via em0 04009 843341 122812348 allow tcp from 10.1.0.0/24 to me dst-port 139 in via em0 04010 98 7644 allow udp from 10.1.0.0/24 to me dst-port 137 in via em0 04011 0 0 allow udp from 10.1.0.0/24 to me dst-port 138 in via em0 04012 0 0 allow udp from 10.1.0.0/24 to me dst-port 139 in via em0 04013 22015 7504479 allow udp from 10.1.0.0/24 to me dst-port 67 in via em0 04014 0 0 allow udp from 10.1.0.0/24 to me dst-port 68 in via em0 04015 0 0 allow tcp from 10.1.0.0/24 to me dst-port 3306 in via em0 04016 95528 15476722 allow tcp from any to me dst-port 22 in via vx0 setup keep-state 04099 18590 859125 deny ip from 10.1.0.0/24 to me 04200 379735117 226730026557 skipto 61000 ip from 10.1.0.0/24 to any in via em0 keep-state 05010 198296402 161773595198 allow ip from me to any out keep-state 59998 29017 2309856 deny icmp from any to me 59999 8 368 deny ip from any to me dst-port 135,137-139,445,4665 60000 592838 36751267 deny log tcp from any to any established 60000 6224471 753393909 deny log ip from any to any 61000 83566789 12020682832 divert 8668 ip from 10.1.0.0/24 to any out via vx0 61001 379731292 226729571052 allow ip from any to any 65535 16 1366 deny ip from any to any