PF

Packet Filter is used in the FreeBSD setup script.

Basic Rules

set skip on lo0

scrub in all

antispoof for lo0

table <fail2ban> persist

pass out quick all

pass quick on lo0 all

block in all

block in quick from <fail2ban>

pass in quick inet proto icmp all

pass in quick inet6 proto icmp6 all

pass in quick inet proto tcp from any to any port 22 keep state

pass in quick inet proto tcp from any to any port 80 keep state

pass in quick inet proto tcp from any to any port 443 keep state

pass in quick inet proto tcp from any to any port 5060 keep state

pass in quick inet proto udp from any to any port 5060 keep state

pass in quick inet proto tcp from any to any port 5080 keep state

pass in quick inet proto udp from any to any port 5080 keep state

pass in quick inet proto udp from any to any port 16384:32768 keep state

Disable

pfctl -d

Enable

pfctl -e

Show Rules

pfctl -s rules