# Example from Nekochan. IPfilter from O2. /etc/ipf.conf
#Loopback rules - always pass
#This way localhost is always available to everything
pass out quick on lo0 all
pass in quick on lo0 all

#-ICMP rules, allow only ping and traceroute
pass in quick on ec0 proto icmp from any to (my-ip-here) icmp-type 0
pass in quick on ec0 proto icmp from any to (my-ip-here) icmp-type 11
block in quick on ec0 proto icmp from any to any

#block all internal-only services, such as RPC, NFS, FAM, etc.
block in quick on ec0 proto tcp/udp from any to (my-ip-here) port = 111
block in quick on ec0 proto tcp/udp from any to (my-ip-here) port = 2049
block in quick on ec0 proto tcp/udp from any to (my-ip-here) port = 806
block in quick on ec0 proto tcp/udp from any to (my-ip-here) port = 1024
block in quick on ec0 proto tcp/udp from any to (my-ip-here) port = 629
block in quick on ec0 proto tcp/udp from any to (my-ip-here) port = 1027

#allow X server access only from my internal network's IP block
block in on ec0 proto tcp/udp from any to (my-ip-here) port = 6000
pass in on ec0 proto tcp/udp from (my-ip-block-here)/28 to (my-ip-here) port = 6000

#allow any outgoing connections I choose to make
pass out quick on ec0 proto tcp from (my-ip-here) to any keep state
pass out quick on ec0 proto udp from (my-ip-here) to any keep state
