nano /etc/ipf.conf

ipf.conf

# Full ACCESS
#pass in on any all
 
# On bloque tous les échanges sur ces interfaces (wm0, fxp0) sachant que l'option "all" ne fonctionnant pas... :
block in on wm0 all
block in on fxp0 all
 
# Reponse au ping :
pass in quick on wm0 proto icmp from any to 192.168.1.102/32 keep state
 
# Accès SSH
pass in quick on wm0 proto tcp from any to 192.168.1.102/32 port = 22 keep state
 
# Block ALL :
#block in on any all

/etc/rc.d/ipfilter onestart

echo 'ipfilter=YES' > /etc/rc.conf

La documentation est accéssible ici : https://www.netbsd.org/docs/network/nsps/config_ipf.html