@0 scrub all random-id fragment reassemble [ Evaluations: 9775293 Packets: 9775293 Bytes: 0 States: 0 ] @0 anchor "ftpsesame/*" all [ Evaluations: 71910 Packets: 0 Bytes: 0 States: 0 ] @1 anchor "firewallrules" all [ Evaluations: 71910 Packets: 0 Bytes: 0 States: 0 ] @2 block drop quick proto tcp from any port = 0 to any [ Evaluations: 71910 Packets: 0 Bytes: 0 States: 0 ] @3 block drop quick proto tcp from any to any port = 0 [ Evaluations: 40182 Packets: 0 Bytes: 0 States: 0 ] @4 block drop quick proto udp from any port = 0 to any [ Evaluations: 71910 Packets: 0 Bytes: 0 States: 0 ] @5 block drop quick proto udp from any to any port = 0 [ Evaluations: 21543 Packets: 0 Bytes: 0 States: 0 ] @6 block drop quick from to any label "Block snort2c hosts" [ Evaluations: 71910 Packets: 0 Bytes: 0 States: 0 ] @7 block drop quick from any to label "Block snort2c hosts" [ Evaluations: 71910 Packets: 0 Bytes: 0 States: 0 ] @8 anchor "loopback" all [ Evaluations: 71910 Packets: 0 Bytes: 0 States: 0 ] @9 pass in quick on lo0 all label "pass loopback" [ Evaluations: 71910 Packets: 0 Bytes: 0 States: 0 ] @10 pass out quick on lo0 all label "pass loopback" [ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ] @11 anchor "packageearly" all [ Evaluations: 71910 Packets: 0 Bytes: 0 States: 0 ] @12 anchor "carp" all [ Evaluations: 71910 Packets: 0 Bytes: 0 States: 0 ] @13 pass quick inet proto icmp from 98.207.252.13 to any keep state [ Evaluations: 71910 Packets: 11286 Bytes: 948024 States: 7 ] @14 anchor "dhcpserverlan" all [ Evaluations: 66834 Packets: 0 Bytes: 0 States: 0 ] @15 pass in quick on ath0 inet proto udp from any port = bootpc to 255.255.255.255 port = bootps label "allow access to DHCP server on LAN" [ Evaluations: 66834 Packets: 0 Bytes: 0 States: 0 ] @16 pass in quick on ath0 inet proto udp from any port = bootpc to 192.168.1.1 port = bootps label "allow access to DHCP server on LAN" [ Evaluations: 2 Packets: 2 Bytes: 656 States: 0 ] @17 pass out quick on ath0 inet proto udp from 192.168.1.1 port = bootps to any port = bootpc label "allow access to DHCP server on LAN" [ Evaluations: 16564 Packets: 2 Bytes: 656 States: 0 ] @18 anchor "wandhcp" all [ Evaluations: 66830 Packets: 0 Bytes: 0 States: 0 ] @19 pass out quick on vr0 proto udp from any port = bootpc to any port = bootps label "allow dhcp client out wan" [ Evaluations: 66830 Packets: 0 Bytes: 0 States: 0 ] @20 block drop in log quick on vr0 inet proto udp from any port = bootps to 192.168.1.0/24 port = bootpc label "block dhcp client out wan" [ Evaluations: 10262 Packets: 0 Bytes: 0 States: 0 ] @21 pass in quick on vr0 proto udp from any port = bootps to any port = bootpc label "allow dhcp client out wan" [ Evaluations: 174 Packets: 174 Bytes: 59852 States: 0 ] @22 block drop in on ! ath0 inet from 192.168.1.0/24 to any [ Evaluations: 62291 Packets: 0 Bytes: 0 States: 0 ] @23 block drop in inet from 192.168.1.1 to any [ Evaluations: 41393 Packets: 0 Bytes: 0 States: 0 ] @24 block drop in on ! vr1 inet from 76.126.216.0/21 to any [ Evaluations: 34099 Packets: 0 Bytes: 0 States: 0 ] @25 block drop in inet from 76.126.222.74 to any [ Evaluations: 34099 Packets: 0 Bytes: 0 States: 0 ] @26 block drop in on ath0 inet6 from fe80::20b:6bff:fe09:f5c6 to any [ Evaluations: 34099 Packets: 0 Bytes: 0 States: 0 ] @27 block drop in on vr1 inet6 from fe80::20c:8eff:fe1a:130b to any [ Evaluations: 12726 Packets: 0 Bytes: 0 States: 0 ] @28 anchor "spoofing" all [ Evaluations: 66656 Packets: 0 Bytes: 0 States: 0 ] @29 anchor "spoofing" all [ Evaluations: 66656 Packets: 0 Bytes: 0 States: 0 ] @30 block drop in on ! vr0 inet from 98.207.252.0/23 to any [ Evaluations: 66656 Packets: 0 Bytes: 0 States: 0 ] @31 block drop in inet from 98.207.252.13 to any [ Evaluations: 43842 Packets: 0 Bytes: 0 States: 0 ] @32 block drop in on vr0 inet6 from fe80::20e:8eff:fe15:900a to any [ Evaluations: 34099 Packets: 0 Bytes: 0 States: 0 ] @33 block drop in log quick on vr0 inet from 10.0.0.0/8 to any label "block private networks from wan block 10/8" [ Evaluations: 5723 Packets: 0 Bytes: 0 States: 0 ] @34 block drop in log quick on vr0 inet from 127.0.0.0/8 to any label "block private networks from wan block 127/8" [ Evaluations: 5723 Packets: 0 Bytes: 0 States: 0 ] @35 block drop in log quick on vr0 inet from 172.16.0.0/12 to any label "block private networks from wan block 172.16/12" [ Evaluations: 5723 Packets: 0 Bytes: 0 States: 0 ] @36 block drop in log quick on vr0 inet from 192.168.0.0/16 to any label "block private networks from wan block 192.168/16" [ Evaluations: 5723 Packets: 0 Bytes: 0 States: 0 ] @37 anchor "limitingesr" all [ Evaluations: 66656 Packets: 0 Bytes: 0 States: 0 ] @38 block drop in quick from to any label "virusprot overload table" [ Evaluations: 66656 Packets: 0 Bytes: 0 States: 0 ] @39 pass out quick on ath0 proto icmp all keep state label "let out anything from firewall host itself" [ Evaluations: 66656 Packets: 0 Bytes: 0 States: 0 ] @40 pass out quick on vr0 proto icmp all keep state label "let out anything from firewall host itself" [ Evaluations: 37989 Packets: 0 Bytes: 0 States: 0 ] @41 pass out quick on vr0 all keep state label "let out anything from firewall host itself" [ Evaluations: 17037 Packets: 151836 Bytes: 71806350 States: 149 ] @42 anchor "firewallout" all [ Evaluations: 56913 Packets: 0 Bytes: 0 States: 0 ] @43 pass out quick on vr0 all keep state label "let out anything from firewall host itself" [ Evaluations: 56913 Packets: 0 Bytes: 0 States: 0 ] @44 pass out quick on ath0 all keep state label "let out anything from firewall host itself" [ Evaluations: 51190 Packets: 1761289 Bytes: 1195125572 States: 96 ] @45 pass out quick on vr1 all keep state label "let out anything from firewall host itself" [ Evaluations: 22523 Packets: 116367 Bytes: 33010729 States: 160 ] @46 pass out quick on ng1 all keep state label "let out anything from firewall host itself pptp" [ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ] @47 pass out quick on ng2 all keep state label "let out anything from firewall host itself pptp" [ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ] @48 pass out quick on ng3 all keep state label "let out anything from firewall host itself pptp" [ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ] @49 pass out quick on ng4 all keep state label "let out anything from firewall host itself pptp" [ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ] @50 pass out quick on ng5 all keep state label "let out anything from firewall host itself pptp" [ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ] @51 pass out quick on ng6 all keep state label "let out anything from firewall host itself pptp" [ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ] @52 pass out quick on ng7 all keep state label "let out anything from firewall host itself pptp" [ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ] @53 pass out quick on ng8 all keep state label "let out anything from firewall host itself pptp" [ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ] @54 pass out quick on ng9 all keep state label "let out anything from firewall host itself pptp" [ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ] @55 pass out quick on ng10 all keep state label "let out anything from firewall host itself pptp" [ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ] @56 pass out quick on ng11 all keep state label "let out anything from firewall host itself pptp" [ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ] @57 pass out quick on ng12 all keep state label "let out anything from firewall host itself pptp" [ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ] @58 pass out quick on ng13 all keep state label "let out anything from firewall host itself pptp" [ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ] @59 pass out quick on ng14 all keep state label "let out anything from firewall host itself pptp" [ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ] @60 pass out quick on ng15 all keep state label "let out anything from firewall host itself pptp" [ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ] @61 pass out quick on ng16 all keep state label "let out anything from firewall host itself pptp" [ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ] @62 pass out quick on enc0 all keep state label "IPSEC internal host to host" [ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ] @63 pass out quick on vr1 proto icmp all keep state label "let out anything from firewall host itself" [ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ] @64 pass out quick on vr1 all keep state label "let out anything from firewall host itself" [ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ] @65 anchor "anti-lockout" all [ Evaluations: 34099 Packets: 0 Bytes: 0 States: 0 ] @66 pass in quick on ath0 inet from any to 192.168.1.1 keep state label "anti-lockout web rule" [ Evaluations: 34099 Packets: 66925 Bytes: 35390317 States: 3 ] @67 anchor "pptp" all [ Evaluations: 33563 Packets: 0 Bytes: 0 States: 0 ] @68 pass in quick on vr0 inet proto gre from any to 98.207.252.13 keep state label "allow gre pptpd" [ Evaluations: 33563 Packets: 0 Bytes: 0 States: 0 ] @69 pass in quick on vr0 inet proto tcp from any to 98.207.252.13 port = pptp modulate state label "allow pptpd 98.207.252.13" [ Evaluations: 5723 Packets: 0 Bytes: 0 States: 0 ] @70 block drop in log proto tcp from to any port = ssh label "sshlockout" [ Evaluations: 32085 Packets: 0 Bytes: 0 States: 0 ] @71 anchor "ftpproxy" all [ Evaluations: 33563 Packets: 0 Bytes: 0 States: 0 ] @72 anchor "pftpx/*" all [ Evaluations: 33563 Packets: 0 Bytes: 0 States: 0 ] @73 pass in quick on vr0 inet proto icmp from any to 98.207.252.13 keep state label "USER_RULE: Allow Ping reply" [ Evaluations: 33563 Packets: 14 Bytes: 1984 States: 0 ] @74 pass in log quick on vr0 inet proto tcp from any to 192.168.1.1 port = ssh keep state label "USER_RULE: NAT SSH -> pfsense" [ Evaluations: 5709 Packets: 0 Bytes: 0 States: 0 ] @75 pass in quick on vr0 inet proto tcp from any to 192.168.1.1 port = http keep state label "USER_RULE: NAT Web Config -> pfsense" [ Evaluations: 2 Packets: 20 Bytes: 2150 States: 0 ] @76 pass in log quick on vr0 inet proto tcp from any to 98.207.252.13 port = 1194 keep state label "USER_RULE: OpenVPN -> pfsense" [ Evaluations: 4243 Packets: 0 Bytes: 0 States: 0 ] @77 pass in quick on vr0 inet proto tcp from any to 192.168.1.2 port = 3389 keep state label "USER_RULE: NAT RDP -> Laptop" [ Evaluations: 4243 Packets: 0 Bytes: 0 States: 0 ] @78 pass in quick on vr0 inet proto tcp from any to 192.168.1.2 port = 45526 keep state label "USER_RULE: NAT BT -> Laptop" [ Evaluations: 3067 Packets: 766549 Bytes: 506011545 States: 39 ] @79 pass in log quick on vr0 inet proto tcp from any to 98.207.252.13 port = pptp keep state label "USER_RULE: PPTP" [ Evaluations: 1176 Packets: 0 Bytes: 0 States: 0 ] @80 pass in quick on ng1 inet from 192.168.1.192/28 to any keep state label "USER_RULE" [ Evaluations: 30480 Packets: 0 Bytes: 0 States: 0 ] @81 pass in quick on ng2 inet from 192.168.1.192/28 to any keep state label "USER_RULE" [ Evaluations: 30480 Packets: 0 Bytes: 0 States: 0 ] @82 pass in quick on ng3 inet from 192.168.1.192/28 to any keep state label "USER_RULE" [ Evaluations: 30480 Packets: 0 Bytes: 0 States: 0 ] @83 pass in quick on ng4 inet from 192.168.1.192/28 to any keep state label "USER_RULE" [ Evaluations: 30480 Packets: 0 Bytes: 0 States: 0 ] @84 pass in quick on ng5 inet from 192.168.1.192/28 to any keep state label "USER_RULE" [ Evaluations: 30480 Packets: 0 Bytes: 0 States: 0 ] @85 pass in quick on ng6 inet from 192.168.1.192/28 to any keep state label "USER_RULE" [ Evaluations: 30480 Packets: 0 Bytes: 0 States: 0 ] @86 pass in quick on ng7 inet from 192.168.1.192/28 to any keep state label "USER_RULE" [ Evaluations: 30480 Packets: 0 Bytes: 0 States: 0 ] @87 pass in quick on ng8 inet from 192.168.1.192/28 to any keep state label "USER_RULE" [ Evaluations: 30480 Packets: 0 Bytes: 0 States: 0 ] @88 pass in quick on ng9 inet from 192.168.1.192/28 to any keep state label "USER_RULE" [ Evaluations: 30480 Packets: 0 Bytes: 0 States: 0 ] @89 pass in quick on ng10 inet from 192.168.1.192/28 to any keep state label "USER_RULE" [ Evaluations: 30480 Packets: 0 Bytes: 0 States: 0 ] @90 pass in quick on ng11 inet from 192.168.1.192/28 to any keep state label "USER_RULE" [ Evaluations: 30480 Packets: 0 Bytes: 0 States: 0 ] @91 pass in quick on ng12 inet from 192.168.1.192/28 to any keep state label "USER_RULE" [ Evaluations: 30480 Packets: 0 Bytes: 0 States: 0 ] @92 pass in quick on ng13 inet from 192.168.1.192/28 to any keep state label "USER_RULE" [ Evaluations: 30480 Packets: 0 Bytes: 0 States: 0 ] @93 pass in quick on ng14 inet from 192.168.1.192/28 to any keep state label "USER_RULE" [ Evaluations: 30480 Packets: 0 Bytes: 0 States: 0 ] @94 pass in quick on ng15 inet from 192.168.1.192/28 to any keep state label "USER_RULE" [ Evaluations: 30480 Packets: 0 Bytes: 0 States: 0 ] @95 pass in quick on ng16 inet from 192.168.1.192/28 to any keep state label "USER_RULE" [ Evaluations: 30480 Packets: 0 Bytes: 0 States: 0 ] @96 pass in quick on vr1 reply-to (vr1 76.126.216.1) inet proto icmp from any to 76.126.222.74 keep state label "USER_RULE: Allow Ping reply" [ Evaluations: 30480 Packets: 17 Bytes: 2140 States: 0 ] @97 pass in quick on vr1 reply-to (vr1 76.126.216.1) inet proto tcp from any to 192.168.1.2 port = 45526 keep state label "USER_RULE: NAT BT -> Laptop" [ Evaluations: 6988 Packets: 1474401 Bytes: 1004043858 States: 56 ] @98 pass in quick on vr1 reply-to (vr1 76.126.216.1) inet proto tcp from any to 192.168.1.2 port = 3389 keep state label "USER_RULE: NAT RDP -> Laptop" [ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ] @99 pass in log quick on vr1 reply-to (vr1 76.126.216.1) inet proto tcp from any to 76.126.222.74 port = 1194 keep state label "USER_RULE: OpenVPN -> pfsense" [ Evaluations: 699 Packets: 0 Bytes: 0 States: 0 ] @100 pass in quick on vr1 reply-to (vr1 76.126.216.1) inet proto tcp from any to 192.168.1.1 port = http keep state label "USER_RULE: NAT Web Config -> pfsense" [ Evaluations: 699 Packets: 0 Bytes: 0 States: 0 ] @101 pass in log quick on vr1 reply-to (vr1 76.126.216.1) inet proto tcp from any to 192.168.1.1 port = ssh keep state label "USER_RULE: NAT SSH -> pfsense" [ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ] @102 pass in quick on ath0 inet proto tcp from any to 127.0.0.1 keep state label "USER_RULE" [ Evaluations: 24176 Packets: 136 Bytes: 7168 States: 0 ] @103 pass in quick on ath0 route-to (vr0 98.207.252.1) inet from 192.168.1.0/24 to 98.207.252.0/23 keep state label "USER_RULE: WAN DMZ" [ Evaluations: 22893 Packets: 1 Bytes: 95 States: 0 ] @104 pass in quick on ath0 route-to (vr1 76.126.216.1) inet from 192.168.1.0/24 to 76.126.216.0/21 keep state label "USER_RULE: WAN2 DMZ" [ Evaluations: 19992 Packets: 0 Bytes: 0 States: 0 ] @105 pass in quick on ath0 route-to (vr0 98.207.252.1) inet proto tcp from 192.168.1.0/24 to 192.168.100.1 port = 1337 keep state label "USER_RULE: Modem 1 -> WAN1" [ Evaluations: 19992 Packets: 0 Bytes: 0 States: 0 ] @106 pass in quick on ath0 route-to (vr0 98.207.252.1) inet proto tcp from 192.168.1.0/24 to 192.168.100.1 port = 1338 keep state label "USER_RULE: Modem 2 -> WAN2" [ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ] @107 pass in log quick on ath0 route-to (vr1 76.126.216.1) inet from 192.168.1.0/24 to keep state label "USER_RULE: SurfboardHacker -> WAN2" [ Evaluations: 19992 Packets: 11610 Bytes: 2727209 States: 0 ] @108 pass in quick on ath0 inet proto tcp from 192.168.1.0/24 to port = https keep state label "NEGATE_ROUTE: Negate policy route for local network(s)" [ Evaluations: 19065 Packets: 0 Bytes: 0 States: 0 ] @109 pass in quick on ath0 route-to (vr0 98.207.252.1) inet proto tcp from 192.168.1.0/24 to any port = https keep state label "USER_RULE: HTTPS -> WAN1" [ Evaluations: 10682 Packets: 1552 Bytes: 669951 States: 2 ] @110 pass in log quick on ath0 inet proto gre from 192.168.1.0/24 to keep state label "NEGATE_ROUTE: Negate policy route for local network(s)" [ Evaluations: 19003 Packets: 0 Bytes: 0 States: 0 ] @111 pass in log quick on ath0 route-to (vr0 98.207.252.1) inet proto gre from 192.168.1.0/24 to any keep state label "USER_RULE: GRE -> WAN1" [ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ] @112 pass in quick on ath0 inet from 192.168.1.0/24 to keep state label "NEGATE_ROUTE: Negate policy route for local network(s)" [ Evaluations: 19003 Packets: 0 Bytes: 0 States: 0 ] @113 pass in quick on ath0 route-to { (vr0 98.207.252.1), (vr1 76.126.216.1) } round-robin inet from 192.168.1.0/24 to any keep state label "USER_RULE: Load Balance" [ Evaluations: 19003 Packets: 240497 Bytes: 100162403 States: 297 ] @114 pass in quick on ath0 inet proto tcp from any to 127.0.0.1 port = ftp-proxy keep state label "FTP PROXY: Allow traffic to localhost" [ Evaluations: 836 Packets: 0 Bytes: 0 States: 0 ] @115 pass in quick on ath0 inet proto tcp from any to 127.0.0.1 port = ftp keep state label "FTP PROXY: Allow traffic to localhost" [ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ] @116 pass in quick on vr0 inet proto tcp from any port = ftp-data to (vr0:1) port > 49000 user = 62 flags S/SA keep state label "FTP PROXY: PASV mode data connection" [ Evaluations: 5403 Packets: 0 Bytes: 0 States: 0 ] @117 pass in quick on vr1 inet proto tcp from any to 127.0.0.1 port = 8022 keep state label "FTP PROXY: Allow traffic to localhost" [ Evaluations: 3939 Packets: 0 Bytes: 0 States: 0 ] @118 pass in quick on vr1 inet proto tcp from any to 127.0.0.1 port = ftp keep state label "FTP PROXY: Allow traffic to localhost" [ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ] @119 anchor "imspector" all [ Evaluations: 6239 Packets: 0 Bytes: 0 States: 0 ] @120 anchor "miniupnpd" all [ Evaluations: 6239 Packets: 0 Bytes: 0 States: 0 ] @121 block drop in log quick all label "Default block all just to be sure." [ Evaluations: 6239 Packets: 6239 Bytes: 594749 States: 0 ] @122 block drop out log quick all label "Default block all just to be sure." [ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]