1b00044a2SJames Carlson# 2b00044a2SJames Carlson# CDDL HEADER START 3b00044a2SJames Carlson# 4b00044a2SJames Carlson# The contents of this file are subject to the terms of the 5b00044a2SJames Carlson# Common Development and Distribution License (the "License"). 6b00044a2SJames Carlson# You may not use this file except in compliance with the License. 7b00044a2SJames Carlson# 8b00044a2SJames Carlson# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 9b00044a2SJames Carlson# or http://www.opensolaris.org/os/licensing. 10b00044a2SJames Carlson# See the License for the specific language governing permissions 11b00044a2SJames Carlson# and limitations under the License. 12b00044a2SJames Carlson# 13b00044a2SJames Carlson# When distributing Covered Code, include this CDDL HEADER in each 14b00044a2SJames Carlson# file and include the License file at usr/src/OPENSOLARIS.LICENSE. 15b00044a2SJames Carlson# If applicable, add the following below this CDDL HEADER, with the 16b00044a2SJames Carlson# fields enclosed by brackets "[]" replaced with your own identifying 17b00044a2SJames Carlson# information: Portions Copyright [yyyy] [name of copyright owner] 18b00044a2SJames Carlson# 19b00044a2SJames Carlson# CDDL HEADER END 20b00044a2SJames Carlson# 21*6ba597c5SAnurag S. Maskey# 22*6ba597c5SAnurag S. Maskey# Copyright 2010 Sun Microsystems, Inc. All rights reserved. 23b00044a2SJames Carlson# Use is subject to license terms. 24b00044a2SJames Carlson# 25b00044a2SJames Carlson 26*6ba597c5SAnurag S. Maskey# Start by blocking everything. 27*6ba597c5SAnurag S. Maskeyblock in log all 28*6ba597c5SAnurag S. Maskeyblock out log all 29b00044a2SJames Carlson 30*6ba597c5SAnurag S. Maskey# Allow loopback traffic 31*6ba597c5SAnurag S. Maskeypass in quick on lo0 32*6ba597c5SAnurag S. Maskeypass out quick on lo0 33b00044a2SJames Carlson 34*6ba597c5SAnurag S. Maskey# Allow DHCP: in to client port, out to server port 35*6ba597c5SAnurag S. Maskeypass in quick proto udp from any to any port = 546 36*6ba597c5SAnurag S. Maskeypass out quick proto udp from any to any port = 547 37b00044a2SJames Carlson 38*6ba597c5SAnurag S. Maskey# Allow ICMP for IPv6 for Neighbor advertisements 39*6ba597c5SAnurag S. Maskeypass in quick proto ipv6-icmp from any to any 40*6ba597c5SAnurag S. Maskeypass out quick proto ipv6-icmp from any to any 41