1b00044a2SJames Carlson#
2b00044a2SJames Carlson# CDDL HEADER START
3b00044a2SJames Carlson#
4b00044a2SJames Carlson# The contents of this file are subject to the terms of the
5b00044a2SJames Carlson# Common Development and Distribution License (the "License").
6b00044a2SJames Carlson# You may not use this file except in compliance with the License.
7b00044a2SJames Carlson#
8b00044a2SJames Carlson# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
9b00044a2SJames Carlson# or http://www.opensolaris.org/os/licensing.
10b00044a2SJames Carlson# See the License for the specific language governing permissions
11b00044a2SJames Carlson# and limitations under the License.
12b00044a2SJames Carlson#
13b00044a2SJames Carlson# When distributing Covered Code, include this CDDL HEADER in each
14b00044a2SJames Carlson# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
15b00044a2SJames Carlson# If applicable, add the following below this CDDL HEADER, with the
16b00044a2SJames Carlson# fields enclosed by brackets "[]" replaced with your own identifying
17b00044a2SJames Carlson# information: Portions Copyright [yyyy] [name of copyright owner]
18b00044a2SJames Carlson#
19b00044a2SJames Carlson# CDDL HEADER END
20b00044a2SJames Carlson#
21*6ba597c5SAnurag S. Maskey#
22*6ba597c5SAnurag S. Maskey# Copyright 2010 Sun Microsystems, Inc.  All rights reserved.
23b00044a2SJames Carlson# Use is subject to license terms.
24b00044a2SJames Carlson#
25b00044a2SJames Carlson
26*6ba597c5SAnurag S. Maskey# Start by blocking everything.
27*6ba597c5SAnurag S. Maskeyblock in log all
28*6ba597c5SAnurag S. Maskeyblock out log all
29b00044a2SJames Carlson
30*6ba597c5SAnurag S. Maskey# Allow loopback traffic
31*6ba597c5SAnurag S. Maskeypass in quick on lo0
32*6ba597c5SAnurag S. Maskeypass out quick on lo0
33b00044a2SJames Carlson
34*6ba597c5SAnurag S. Maskey# Allow DHCP: in to client port, out to server port
35*6ba597c5SAnurag S. Maskeypass in quick proto udp from any to any port = 546
36*6ba597c5SAnurag S. Maskeypass out quick proto udp from any to any port = 547
37b00044a2SJames Carlson
38*6ba597c5SAnurag S. Maskey# Allow ICMP for IPv6 for Neighbor advertisements
39*6ba597c5SAnurag S. Maskeypass in quick proto ipv6-icmp from any to any
40*6ba597c5SAnurag S. Maskeypass out quick proto ipv6-icmp from any to any
41