nano /etc/ipf.conf
# Full ACCESS #pass in on any all # On bloque tous les échanges sur ces interfaces (wm0, fxp0) sachant que l'option "all" ne fonctionnant pas... : block in on wm0 all block in on fxp0 all # Reponse au ping : pass in quick on wm0 proto icmp from any to 192.168.1.102/32 keep state # Accès SSH pass in quick on wm0 proto tcp from any to 192.168.1.102/32 port = 22 keep state # Block ALL : #block in on any all
/etc/rc.d/ipfilter onestart
echo 'ipfilter=YES' > /etc/rc.conf
La documentation est accéssible ici : https://www.netbsd.org/docs/network/nsps/config_ipf.html