root@Medes:~ # pfctl -sr scrub in on igb0 all fragment reassemble pass on igb0 from <whitelist> to any flags S/SA keep state block drop in on ! igb0 inet from 42.112.126.128/26 to any block drop in inet from 42.112.126.152 to any block return in log all block drop in from no-route to any block drop in from urpf-failed to any block drop proto udp all block drop in quick on igb0 proto tcp all flags FPU/FSRPAUEW block drop in quick on igb0 proto tcp all flags FSRPAUEW/FSRPAUEW block drop in quick on igb0 proto tcp all flags FSRAU/FSRPAUEW block drop in quick on igb0 proto tcp all flags /FSRPAUEW block drop in quick on igb0 proto tcp all flags SR/SR block drop in quick on igb0 proto tcp all flags FS/FS block drop in quick on igb0 inet from <__automatic_1f805255_0> to any block drop in quick on igb0 from <blocklist> to any block drop out quick on igb0 inet from any to <__automatic_1f805255_1> block drop out quick on igb0 from any to <blocklist> pass in quick on igb0 proto tcp from any to any port = smtp flags S/SA keep state pass in quick on igb0 proto tcp from any to any port = smtps flags S/SA keep state pass in quick on igb0 proto tcp from any to any port = submission flags S/SA keep state pass in quick on igb0 proto tcp from any to any port = pop3 flags S/SA keep state pass in quick on igb0 proto tcp from any to any port = pop3s flags S/SA keep state pass in quick on igb0 proto tcp from any to any port = imap flags S/SA keep state pass in quick on igb0 proto tcp from any to any port = imaps flags S/SA keep state pass in quick on igb0 proto tcp from any to any port = http flags S/SA keep state pass in quick on igb0 proto tcp from any to any port = https flags S/SA keep state pass in quick on igb0 proto tcp from any to any port = ftp flags S/SA keep state pass in quick on igb0 proto tcp from any to any port = sftp flags S/SA keep state pass in quick on igb0 proto tcp from any to any port = 5668 flags S/SA keep state pass in quick on igb0 proto tcp from any to any port = 5665 flags S/SA keep state pass in quick on igb0 proto udp from any to any port = smtp keep state pass in quick on igb0 proto udp from any to any port = smtps keep state pass in quick on igb0 proto udp from any to any port = submission keep state pass in quick on igb0 proto udp from any to any port = pop3 keep state pass in quick on igb0 proto udp from any to any port = pop3s keep state pass in quick on igb0 proto udp from any to any port = imap keep state pass in quick on igb0 proto udp from any to any port = imaps keep state pass in quick on igb0 proto udp from any to any port = http keep state pass in quick on igb0 proto udp from any to any port = https keep state pass in quick on igb0 proto udp from any to any port = ftp keep state pass in quick on igb0 proto udp from any to any port = sftp keep state pass in quick on igb0 proto udp from any to any port = 5668 keep state pass in quick on igb0 proto udp from any to any port = 5665 keep state pass out quick on igb0 proto tcp from any to any port = domain flags S/SA keep state pass out quick on igb0 proto tcp from any to any port = ntp flags S/SA keep state pass out quick on igb0 proto tcp from any to any port = http flags S/SA keep state pass out quick on igb0 proto tcp from any to any port = https flags S/SA keep state pass out quick on igb0 proto tcp from any to any port = 5665 flags S/SA keep state pass out quick on igb0 proto udp from any to any port = domain keep state pass out quick on igb0 proto udp from any to any port = ntp keep state pass out quick on igb0 proto udp from any to any port = http keep state pass out quick on igb0 proto udp from any to any port = https keep state pass out quick on igb0 proto udp from any to any port = 5665 keep state pass quick inet proto icmp all icmp-type echoreq keep state pass quick inet proto icmp all icmp-type unreach keep state pass quick proto ipv6-icmp all keep state pass out on igb0 inet proto udp from any to any port 33433 >< 33626 keep state