heads/ferm-offline.conf

# -*- mode: conf[space] -*-
#
#  Configuration file for ferm(1).
#

# IPv4
domain ip {
    table filter {
        chain INPUT {
            policy DROP;
        }

        chain OUTPUT {
            policy DROP;
        }

        chain FORWARD {
            policy DROP;
        }
    }

    table nat {
        chain PREROUTING {
            policy DROP;
        }

        chain POSTROUTING {
            policy DROP;
        }

        chain OUTPUT {
            policy DROP;
        }
    }
}

# IPv6:
domain ip6 {
    table filter {
        chain INPUT {
            policy DROP;
        }

        chain FORWARD {
            policy DROP;
        }

        chain OUTPUT {
            policy DROP;
        }
    }
}