

pfTop: Up Rule 1-92/92, View: rules
RULE  ACTION   DIR LOG Q IF     PR        K     PKTS    BYTES   STATES   MAX INFO                                                                     
   0  Pass     Any                                 0        0        0       all                                                                      
   1  Pass     Any                                 0        0        0       all                                                                      
   2  Pass     Any     Q contro           K        4      336        0       all  flags S/SA                                                          
   3  Pass     In      Q lo0              K       12     1364        0       inet6 all  flags S/SA                                                    
   4  Pass     Out     Q lo0              K       12     1364        0       inet6 all  flags S/SA                                                    
   5  Block    In      Q                           0        0        0       drop inet6 all                                                           
   6  Block    Out     Q                        3433   526556        0       drop inet6 all                                                           
   7  Block    In      Q                           0        0        0       drop inet6 from any to <_nat64reserved_>                                 
   8  Block    Out     Q                           0        0        0       drop inet6 from any to <_nat64reserved_>                                 
   9  Block    In  Log Q                           0        0        0       drop inet from 169.254.0.0/16 to any                                     
  10  Block    In  Log Q                           0        0        0       drop inet from any to 169.254.0.0/16                                     
  11  Block    In                                  0        0        0       drop inet all                                                            
  12  Block    Out                                 0        0        0       drop inet all                                                            
  13  Block    In                                  0        0        0       drop inet6 all                                                           
  14  Block    Out                                 0        0        0       drop inet6 all                                                           
  15  Block    Any     Q        tcp                0        0        0       drop inet from any port = 0 to any                                       
  16  Block    Any     Q        udp                0        0        0       drop inet from any port = 0 to any                                       
  17  Block    Any     Q        tcp                0        0        0       drop inet from any to any port = 0                                       
  18  Block    Any     Q        udp                0        0        0       drop inet from any to any port = 0                                       
  19  Block    Any Log Q                           0        0        0       drop from <snort2c> to any                                               
  20  Block    Any Log Q                           0        0        0       drop from any to <snort2c>                                               
  21  Block    In      Q        carp               0        0        0       drop from (self) to any                                                  
  22  Pass     Any     Q        carp         2344319  128204K        0       all                                                                      
  23  Block    In      Q        tcp                0        0        0       drop from <sshguard> to (self) port = ssh                                
  24  Block    In      Q        tcp                0        0        0       drop from <sshguard> to (self) port = https                              
  25  Block    In      Q                           0        0        0       drop from <virusprot> to any                                             
  26  Block    Out     Q        udp                0        0        0       drop from any port = bootps to any port = bootpc  tagged dhcpin          
  27  Pass     In      Q ix3    udp              339   110175        0       from any port = bootps to any port = bootpc  tag dhcpin                  
  28  Pass     Out     Q ix3    udp              339   111192        0       from any port = bootpc to any port = bootps                              
  29  Block    In        !ix3                      0        0        0       drop inet from 172.21.56.0/25 to any                                     
  30  Block    In        !ix3                      0        0        0       drop inet from 172.21.56.11/32 to any                                    
  31  Block    In        ix3                       0        0        0       drop inet6 from fe80::92ec:77ff:fe1d:13ea/128 to any                     
  32  Block    In                                  0        0        0       drop inet from 172.21.56.51/32 to any                                    
  33  Block    In                                  0        0        0       drop inet from 172.21.56.11/32 to any                                    
  34  Block    In        !igc0                     0        0        0       drop inet from 192.168.254.0/24 to any                                   
  35  Block    In        !igc0                     0        0        0       drop inet6 from 2a07:7e84:1000:19a1::/64 to any                          
  36  Block    In        !igc0                     0        0        0       drop inet from 192.168.254.11/32 to any                                  
  37  Block    In        igc0                      0        0        0       drop inet6 from fe80::92ec:77ff:fe1d:13ee/128 to any                     
  38  Block    In                                  0        0        0       drop inet from 192.168.254.10/32 to any                                  
  39  Block    In                                  0        0        0       drop inet6 from 2a07:7e84:1000:19a1:8ac9:b3ff:feb6:1639/128 to any       
  40  Block    In                                  0        0        0       drop inet from 192.168.254.11/32 to any                                  
  41  Pass     In      Q igc0   udp       K       36    11964        0       inet from any port = bootpc to 255.255.255.255/32 port = bootps          
  42  Pass     In      Q igc0   udp       K      132    43296        0       inet from any port = bootpc to 192.168.254.10/32 port = bootps           
  43  Pass     Out     Q igc0   udp       K        0        0        0       inet from 192.168.254.10/32 port = bootps to any port = bootpc           
  44  Pass     Any     Q igc0   udp       K        0        0        0       inet6 from fe80::/10 to fe80::/10 port = dhcpv6-client                   
  45  Pass     Any     Q igc0   udp       K        0        0        0       inet6 from fe80::/10 to ff02::/16 port = dhcpv6-client                   
  46  Pass     Any     Q igc0   udp       K        0        0        0       inet6 from fe80::/10 to ff02::/16 port = dhcpv6-server                   
  47  Pass     Any     Q igc0   udp       K        0        0        0       inet6 from ff02::/16 to fe80::/10 port = dhcpv6-server                   
  48  Pass     In      Q igc0   udp       K        0        0        0       inet6 from fe80::/10 to 2a07:7e84:1000:19a1:8ac9:b3ff:feb6:1639/128 port 
  49  Pass     Out     Q igc0   udp       K        0        0        0       inet6 from 2a07:7e84:1000:19a1:8ac9:b3ff:feb6:1639/128 port = dhcpv6-serv
  50  Block    In        !ix2                      0        0        0       drop inet from 192.168.253.0/24 to any                                   
  51  Block    In        ix2                       0        0        0       drop inet6 from fe80::92ec:77ff:fe1d:13eb/128 to any                     
  52  Block    In                                  0        0        0       drop inet from 192.168.253.200/32 to any                                 
  53  Block    In        !igc1                     0        0        0       drop inet from 192.168.2.0/24 to any                                     
  54  Block    In        igc1                      0        0        0       drop inet6 from fe80::92ec:77ff:fe1d:13ef/128 to any                     
  55  Block    In                                  0        0        0       drop inet from 192.168.2.1/32 to any                                     
  56  Pass     In      Q igc1   udp       K        0        0        0       inet from any port = bootpc to 255.255.255.255/32 port = bootps          
  57  Pass     In      Q igc1   udp       K        0        0        0       inet from any port = bootpc to 192.168.2.1/32 port = bootps              
  58  Pass     Out     Q igc1   udp       K        0        0        0       inet from 192.168.2.1/32 port = bootps to any port = bootpc              
  59  Block    In        !ovpns                    0        0        0       drop inet from 10.137.0.0/24 to any                                      
  60  Block    In        ovpns1                    0        0        0       drop inet6 from fe80::92ec:77ff:fe1d:13ee/128 to any                     
  61  Block    In                                  0        0        0       drop inet from 10.137.0.1/32 to any                                      
  62  Block    In        !ipsec                    0        0        0       drop inet from 10.13.3.4/30 to any                                       
  63  Block    In        ipsec1                    0        0        0       drop inet6 from fe80::92ec:77ff:fe1d:13ee/128 to any                     
  64  Block    In                                  0        0        0       drop inet from 10.13.3.7/32 to any                                       
  65  Block    In        !ix3.3                    0        0        0       drop inet from 192.168.30.0/24 to any                                    
  66  Block    In        ix3.30                    0        0        0       drop inet6 from fe80::92ec:77ff:fe1d:13ea/128 to any                     
  67  Block    In                                  0        0        0       drop inet from 192.168.30.12/32 to any                                   
  68  Pass     In        lo0              K    42000  8708926        3       inet all  flags S/SA                                                     
  69  Pass     Out       lo0              K        0        0        0       inet all  flags S/SA                                                     
  70  Pass     Out                        K  136427K  121653M       20       inet all  flags S/SA allow-opts                                          
  71  Pass     Out                        K   222740 34342791       22       route-to ... inet from 172.21.56.51/32 to ! 172.21.56.0/25  flags S/SA al
  72  Pass     Out                        K        0        0        0       route-to ... inet from 172.21.56.11/32 to ! 172.21.56.0/25  flags S/SA al
  73  Pass     Out                        K        0        0        0       route-to ... inet from 10.137.0.1/32 to ! 10.137.0.0/24  flags S/SA allow
  74  Pass     Out                        K        0        0        0       inet from 10.13.3.7/32 to ! 10.13.3.4/30  flags S/SA allow-opts          
  75  Pass     Out       enc0             K        0        0        0       all  flags S/SA                                                          
  76  Pass     Any                                 0        0        0       all                                                                      
  77  Pass     In      Q enc0             K        0        0        0       inet all  flags S/SA                                                     
  78  Pass     In      Q openvp           K        0        0        0       inet all  flags S/SA                                                     
  79  Pass     In      Q ix3              K  4377780  155904K        0       reply-to ... inet all  flags S/SA                                        
  80  Pass     In      Q ix3              K        0        0        0       inet6 all  flags S/SA                                                    
  81  Pass     In      Q igc0             K  132027K  121539M       32       inet from <LAN__NETWORK> to any  flags S/SA                              
  82  Pass     In      Q igc0             K        0        0        0       inet6 from <LAN__NETWORK> to any  flags S/SA                             
  83  Pass     In      Q igc1             K        0        0        0       inet all  flags S/SA                                                     
  84  Pass     In      Q ix3.30           K        0        0        0       inet all  flags S/SA                                                     
  85  Pass     Out              udp       K        2      556        0       inet from (self) to 172.21.56.1/32 port = isakmp                         
  86  Pass     In        ix3    udp       K        0        0        0       inet from 172.21.56.1/32 to (self) port = isakmp                         
  87  Pass     Out              udp       K        0        0        0       inet from (self) to 172.21.56.1/32 port = ipsec-nat-t                    
  88  Pass     In        ix3    udp       K        0        0        0       inet from 172.21.56.1/32 to (self) port = ipsec-nat-t                    
  89  Pass     Out              esp       K        0        0        0       inet from (self) to 172.21.56.1/32                                       
  90  Pass     In        ix3    esp       K        0        0        0       inet from 172.21.56.1/32 to (self)                                       
  91  Pass     Any                                 0        0        0       all                                                                      
