Basic Filtering

• basic syntax: rule = action direction ip

• action = "block" or "pass"

• direction = "in" or "out" (relative to system)

• ip = srcdst

• srcdst =

  • "all" or
  • "from" ["!"] object "to" ["!"] object
  • object = addr

Notes: