

pfTop: Up Rule 1-85/85, View: rules
RULE  ACTION   DIR LOG Q IF     PR        K     PKTS    BYTES   STATES   MAX INFO                                                                     
   0  Pass     Any                                 0        0        0       all                                                                      
   1  Pass     Any                                 0        0        0       all                                                                      
   2  Block    In  Log Q                           0        0        0       drop inet6 from any to <_nat64reserved_>                                 
   3  Block    Out Log Q                           0        0        0       drop inet6 from any to <_nat64reserved_>                                 
   4  Block    In  Log Q                           0        0        0       drop inet from 169.254.0.0/16 to any                                     
   5  Block    In  Log Q                           0        0        0       drop inet from any to 169.254.0.0/16                                     
   6  Block    In  Log                             0        0        0       drop inet all                                                            
   7  Block    Out Log                             0        0        0       drop inet all                                                            
   8  Block    In  Log                             0        0        0       drop inet6 all                                                           
   9  Block    Out Log                             0        0        0       drop inet6 all                                                           
  10  Pass     Any     Q        ipv6-icmp K        0        0        0       inet6 all                                                                
  11  Pass     Any     Q        ipv6-icmp K        0        0        0       inet6 all                                                                
  12  Pass     Any     Q        ipv6-icmp K      477    32448        1       inet6 all                                                                
  13  Pass     Any     Q        ipv6-icmp K        0        0        0       inet6 all                                                                
  14  Pass     Out     Q        ipv6-icmp K        0        0        0       inet6 from fe80::/10 to fe80::/10                                        
  15  Pass     Out     Q        ipv6-icmp K        0        0        0       inet6 from fe80::/10 to fe80::/10                                        
  16  Pass     Out     Q        ipv6-icmp K        0        0        0       inet6 from fe80::/10 to fe80::/10                                        
  17  Pass     Out     Q        ipv6-icmp K        0        0        0       inet6 from fe80::/10 to fe80::/10                                        
  18  Pass     Out     Q        ipv6-icmp K        0        0        0       inet6 from fe80::/10 to fe80::/10                                        
  19  Pass     Out     Q        ipv6-icmp K        0        0        0       inet6 from fe80::/10 to ff02::/16                                        
  20  Pass     Out     Q        ipv6-icmp K        1       56        0       inet6 from fe80::/10 to ff02::/16                                        
  21  Pass     Out     Q        ipv6-icmp K        0        0        0       inet6 from fe80::/10 to ff02::/16                                        
  22  Pass     Out     Q        ipv6-icmp K        0        0        0       inet6 from fe80::/10 to ff02::/16                                        
  23  Pass     Out     Q        ipv6-icmp K        0        0        0       inet6 from fe80::/10 to ff02::/16                                        
  24  Pass     In      Q        ipv6-icmp K        0        0        0       inet6 from fe80::/10 to fe80::/10                                        
  25  Pass     In      Q        ipv6-icmp K        0        0        0       inet6 from fe80::/10 to fe80::/10                                        
  26  Pass     In      Q        ipv6-icmp K        1      160        0       inet6 from fe80::/10 to fe80::/10                                        
  27  Pass     In      Q        ipv6-icmp K        0        0        0       inet6 from fe80::/10 to fe80::/10                                        
  28  Pass     In      Q        ipv6-icmp K        0        0        0       inet6 from fe80::/10 to fe80::/10                                        
  29  Pass     In      Q        ipv6-icmp K        0        0        0       inet6 from ff02::/16 to fe80::/10                                        
  30  Pass     In      Q        ipv6-icmp K        0        0        0       inet6 from ff02::/16 to fe80::/10                                        
  31  Pass     In      Q        ipv6-icmp K        0        0        0       inet6 from ff02::/16 to fe80::/10                                        
  32  Pass     In      Q        ipv6-icmp K        0        0        0       inet6 from ff02::/16 to fe80::/10                                        
  33  Pass     In      Q        ipv6-icmp K        0        0        0       inet6 from ff02::/16 to fe80::/10                                        
  34  Pass     In      Q        ipv6-icmp K        0        0        0       inet6 from fe80::/10 to ff02::/16                                        
  35  Pass     In      Q        ipv6-icmp K        1       56        0       inet6 from fe80::/10 to ff02::/16                                        
  36  Pass     In      Q        ipv6-icmp K        6      960        0       inet6 from fe80::/10 to ff02::/16                                        
  37  Pass     In      Q        ipv6-icmp K        0        0        0       inet6 from fe80::/10 to ff02::/16                                        
  38  Pass     In      Q        ipv6-icmp K        0        0        0       inet6 from fe80::/10 to ff02::/16                                        
  39  Pass     In      Q        ipv6-icmp K        0        0        0       inet6 from ::/128 to ff02::/16                                           
  40  Pass     In      Q        ipv6-icmp K        0        0        0       inet6 from ::/128 to ff02::/16                                           
  41  Pass     In      Q        ipv6-icmp K        0        0        0       inet6 from ::/128 to ff02::/16                                           
  42  Pass     In      Q        ipv6-icmp K        0        0        0       inet6 from ::/128 to ff02::/16                                           
  43  Pass     In      Q        ipv6-icmp K        0        0        0       inet6 from ::/128 to ff02::/16                                           
  44  Block    Any Log Q        tcp                0        0        0       drop inet from any port = 0 to any                                       
  45  Block    Any Log Q        udp                0        0        0       drop inet from any port = 0 to any                                       
  46  Block    Any Log Q        tcp                0        0        0       drop inet from any to any port = 0                                       
  47  Block    Any Log Q        udp                0        0        0       drop inet from any to any port = 0                                       
  48  Block    Any Log Q        tcp                0        0        0       drop inet6 from any port = 0 to any                                      
  49  Block    Any Log Q        udp                0        0        0       drop inet6 from any port = 0 to any                                      
  50  Block    Any Log Q        tcp                0        0        0       drop inet6 from any to any port = 0                                      
  51  Block    Any Log Q        udp                0        0        0       drop inet6 from any to any port = 0                                      
  52  Block    Any Log Q                           0        0        0       drop from <snort2c> to any                                               
  53  Block    Any Log Q                           0        0        0       drop from any to <snort2c>                                               
  54  Block    In  Log Q        tcp                0        0        0       drop from <sshguard> to (self) port = ssh                                
  55  Block    In  Log Q        tcp                0        0        0       drop from <sshguard> to (self) port = https                              
  56  Block    In  Log Q                           0        0        0       drop from <virusprot> to any                                             
  57  Block    Out     Q        udp                0        0        0       drop from any port = bootps to any port = bootpc  tagged dhcpin          
  58  Pass     In      Q em0    udp                2      635        0       from any port = bootps to any port = bootpc  tag dhcpin                  
  59  Pass     Out     Q em0    udp                0        0        0       from any port = bootpc to any port = bootps                              
  60  Pass     In      Q em0    udp       K        0        0        0       inet6 from fe80::/10 port = dhcpv6-client to fe80::/10 port = dhcpv6-clie
  61  Pass     In      Q em0    udp       K       24     4420        0       from any port = dhcpv6-server to any port = dhcpv6-client                
  62  Pass     Out     Q em0    udp       K       24     2462        0       from any port = dhcpv6-client to any port = dhcpv6-server                
  63  Block    In  Log Q em0                       4     1312        0       drop from <bogons> to any                                                
  64  Block    In  Log Q em0                       0        0        0       drop from <bogonsv6> to any                                              
  65  Block    In  Log   !em0                      0        0        0       drop inet6 from 2a07:7e84:1000:19a1::/64 to any                          
  66  Block    In  Log   em0                       0        0        0       drop inet6 from fe80::a00:27ff:feba:b855/128 to any                      
  67  Block    In  Log                             0        0        0       drop inet6 from 2a07:7e84:1000:19a1:a00:27ff:feba:b855/128 to any        
  68  Block    In  Log                             0        0        0       drop inet6 from 2a07:7e84:1000:19a1::3000/128 to any                     
  69  Block    In  Log   !em0                      0        0        0       drop inet from 192.168.254.0/24 to any                                   
  70  Block    In  Log                             0        0        0       drop inet from 192.168.254.26/32 to any                                  
  71  Pass     In        lo0              K      176    15453        0       inet all  flags S/SA                                                     
  72  Pass     Out       lo0              K        0        0        0       inet all  flags S/SA                                                     
  73  Pass     In        lo0              K       55     6470        0       inet6 all  flags S/SA                                                    
  74  Pass     Out       lo0              K        0        0        0       inet6 all  flags S/SA                                                    
  75  Pass     Out                        K     5504   170220        0       inet all  flags S/SA allow-opts                                          
  76  Pass     Out                        K     5713   312356        0       inet6 all  flags S/SA allow-opts                                         
  77  Pass     Out                        K     4901  3020510        0       route-to ... inet from 192.168.254.26/32 to ! 192.168.254.0/24  flags S/S
  78  Pass     Out                        K        0        0        0       route-to ... inet6 from 2a07:7e84:1000:19a1::3000/128 to ! 2a07:7e84:1000
  79  Pass     In      Q em0    tcp       K     6894  5612297        0       from any to (em0) port = https  flags S/SA                               
  80  Pass     In      Q em0    tcp       K        0        0        0       from any to (em0) port = http  flags S/SA                                
  81  Pass     Any                                 0        0        0       all                                                                      
  82  Pass     In      Q em0              K        0        0        0       reply-to ... inet all  flags S/SA                                        
  83  Pass     In      Q em0    tcp       K        0        0        0       reply-to ... inet all  flags S/SA                                        
  84  Pass     Any                                 0        0        0       all                                                                      
