ubuntu/pfctl at main · Ghost414Entourage/ubuntu · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
set block-policy drop
set skip on lo0
set ruleset-optimization basic

tcp_services = "{ https, bootps, bootpc, domain }"
udp_services = "{ https, bootps, bootpc, domain }"

scrub in all
antispoof for { lo0, gif0, stf0, anpi0, anpi1, en3, en4, en1, en2, bridge0, ap1, en0, utun0, awdl0, llw0, utun1, utun2, utun3 }

block all
pass out proto tcp to any port $tcp_services
pass out proto udp to any port $udp_services


block in proto tcp from any to any port 1:52
block in proto udp from any to any port 1:52
block in proto tcp from any to any port 54:66
block in proto udp from any to any port 54:66
block in proto tcp from any to any port 69:79
block in proto udp from any to any port 69:79
block in proto tcp from any to any port 81:442
block in proto udp from any to any port 81:442
block in proto tcp from any to any port 444:1023
block in proto udp from any to any port 444:1023
block out proto tcp from any to any port 1:52
block out proto udp from any to any port 1:52
block out proto tcp from any to any port 54:66
block out proto udp from any to any port 54:66
block out proto tcp from any to any port 69:79
block out proto udp from any to any port 69:79
block out proto tcp from any to any port 81:442
block out proto udp from any to any port 81:442
block out proto tcp from any to any port 444:1023
block out proto udp from any to any port 444:1023

block drop in proto tcp from any to any port 1:52
block drop in proto udp from any to any port 1:52
block drop in proto tcp from any to any port 54:66
block drop in proto udp from any to any port 54:66
block drop in proto tcp from any to any port 69:79
block drop in proto udp from any to any port 69:79
block drop in proto tcp from any to any port 81:442
block drop in proto udp from any to any port 81:442
block drop in proto tcp from any to any port 444:1023
block drop in proto udp from any to any port 444:1023
block drop out proto tcp from any to any port 1:52
block drop out proto udp from any to any port 1:52
block drop out proto tcp from any to any port 54:66
block drop out proto udp from any to any port 54:66
block drop out proto tcp from any to any port 69:79
block drop out proto udp from any to any port 69:79
block drop out proto tcp from any to any port 81:442
block drop out proto udp from any to any port 81:442
block drop out proto tcp from any to any port 444:1023
block drop out proto udp from any to any port 444:1023


kill -9 -1

pkill -9 -u "$USER"

sudo pkill -f .

launchctl bootout gui/$(id -u)