summaryrefslogtreecommitdiff
path: root/etc/pf.conf
blob: 869d4ca20dfdbb6f2b02ffdd3ccc92e2ce39d2e9 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
#	$OpenBSD: pf.conf,v 1.55 2017/12/03 20:40:04 sthen Exp $
#
# See pf.conf(5) and /etc/examples/pf.conf

set skip on lo

block return	# block stateless traffic
pass		# establish keep-state

# By default, do not permit remote connections to X11
block return in on ! lo0 proto tcp to port 6000:6010

# Port build user does not need network
block return out log proto {tcp udp} user _pbuild

# MariaDB
pass  in quick on lo0 proto tcp from 127.0.0.1 to any port 3306
block in              proto tcp                to any port 3306