Okay, found some stuff on the internet; this is it at the moment:

# $OpenBSD: PF firewall rules $

# ports: see /etc/services
#   21 = ftp
#   22 = ssh
#   25 = smtp
#   53 = domain
#   80 = www
#  110 = pop3
#  123 = ntp
#  631 = ipp (CUPS)
# 6667 = irc

tcp_pass = "{ 21 22 25 53 80 110 123 6667}"
udp_pass = "{ 53 110 }"

# scrub
scrub in all

# setup a default deny policy
block in  all
block out all

antispoof for { bce0, wpi0 } inet

pass out on { bce0, wpi0 } proto tcp to any port  $tcp_pass
pass out on { bce0, wpi0 } proto udp to any port  $udp_pass


> 
> Any help to make my pf settings more secure would be appreciated.
> 
> To be sure; I am running pf on my laptop, and there is no other computer 
> connected to my laptop.
> 
> Jan

Reply via email to