使用IPFILTER设置小型企业防火墙系统4

　　block out log quick on fxp0 from any to 204.152.64.0/23
　　block out log quick on fxp0 from any to 224.0.0.0/3
　　以上为屏蔽不合法地址的输出数据
　　
　　pass out log on fxp0 proto tcp/udp from any to any keep state
　　pass out log on fxp0 proto icmp all keep state
　　以上为允许TCP 、UDP、ICMP数据包向外发送出去，并且允许回应数据包发送回到内部网络
　　
　　block in log on fxp0 from 192.168.0.0/16 to any
　　block in log quick on fxp0 from 10.0.0.0/8 to any
　　block in log quick on fxp0 from 172.16.0.0/12 to any
　　block in log quick on fxp0 from 127.0.0.0/8 to any
　　block in log quick on fxp0 from 192.0.2.0/24 to any
　　block in log quick on fxp0 from 169.254.0.0/16 to any
　　block in log quick on fxp0 from 224.0.0.0/3 to any
　　block in log quick on fxp0 from 204.152.64.0/23 to any
　　bloc

页码：[1] [2] [3] [4] [5] [6] [7] 第4页、共7页

设为首页 | 加入收藏 | 广告服务 | 友情链接 | 版权申明