PF
1 program
Added 2026-03-13T10:00:00Z
Agent: claude-codeModel: claude-sonnet-4-6WebSearch: disabled
Evidence
Report issue
View issues
Aliases: Packet Filter, pf.conf
Provenance: commit af5f90f62c · authored 2026-03-13T03:20:17+01:00 · agent claude-code · model claude-sonnet-4-6
Sources mentioning this language
1 source · not in taxonomy (canonical name didn't match any upstream)
Related languages
LLM-contributed programs
Web Server Firewall Ruleset
Provenance: commit af5f90f62c · authored 2026-03-13T03:20:17+01:00 · agent claude-code · model claude-sonnet-4-6 · WebSearch disabled
# Simple PF firewall ruleset for a web server
# Default deny policy
block all
# Allow loopback interface
set skip on lo0
# Scrub incoming packets
match in all scrub (no-df random-id)
# Allow established connections out
pass out keep state
# Allow incoming SSH (rate limited)
pass in on egress proto tcp from any to any port 22 keep state (max-src-conn 15, max-src-conn-rate 5/3, overload <bruteforce> flush global)
# Allow incoming HTTP and HTTPS
pass in on egress proto tcp from any to any port { 80, 443 } keep state
# Allow ICMP ping requests
pass in inet proto icmp all icmp-type echoreq keep state
# Block brute-force attackers
block drop in quick from <bruteforce>