#
#  // ppxp filter type01 //
#
# initial idle timer
#
set idle.init 60
#
# clear all filter
#
filter ip -aT all
filter ip -aI all
filter ip -aO all
#
# only Triger domain-nameserver and TCP/start
#
filter ip +rT
filter udp +aT -D 0.0.0.0 domain
filter tcp +aT -F syn !ack
#
# Keep Alive by Income Packet
#
filter ip  +nI
filter udp +kI -S 0.0.0.0 domain -K 15
filter udp +kI -S 0.0.0.0 prospero prospero-np -K 90
filter tcp +kI -F !fin !rst -K 15
filter tcp +kI -F syn -K 30
filter tcp +kI -S 0.0.0.0 ftp ftp-data -K 60
filter tcp +kI -D 0.0.0.0 ftp ftp-data -K 60
filter tcp +kI -S 0.0.0.0 www nntp irc 8080 -K 180
filter tcp +kI -S 0.0.0.0 ssh telnet login shell -K 300
#
# Keep Alive by Outgoing Packet
#
filter ip  +nO
filter icmp +kO -K 15
filter udp +kO -D 0.0.0.0 domain -K 15
filter udp +kO -D 0.0.0.0 prospero prospero-np -K 90
filter tcp +kO -F !fin !rst -K 15
filter tcp +kO -F syn -K 30
filter tcp +kO -S 0.0.0.0 ftp ftp-data -K 60
filter tcp +kO -D 0.0.0.0 ftp ftp-data -K 60
filter tcp +kO -D 0.0.0.0 www nntp irc 8080 -K 180
filter tcp +kO -D 0.0.0.0 ssh telnet login shell -K 300
#
# auto on
#
auto on
