OpenBSD hardening


Firewall - PF - Esempio (2/3):


               pass in on $ext_if proto tcp from any to $comp3 port 80 flags S/SA synproxy state

               pass in on $ext_if inet proto tcp from port 20 to ($ext_if) user proxy flags S/SA keep state

               pass in inet proto icmp all icmp-type $icmp_types keep state

               pass in  on $int_if from $int_if:network to any keep state
               pass out on $int_if from any to $int_if:network keep state

               pass out on $ext_if proto tcp all modulate state flags S/SA
               pass out on $ext_if proto { udp, icmp } all keep state