1 1.1 christos # $NetBSD: example.10,v 1.1.1.1 2012/03/23 21:20:15 christos Exp $ 2 1.1 christos # 3 1.1 christos # pass ack packets (ie established connection) 4 1.1 christos # 5 1.1 christos pass in proto tcp from 10.1.0.0/16 port = 23 to 10.2.0.0/16 flags A/A 6 1.1 christos pass out proto tcp from 10.1.0.0/16 port = 23 to 10.2.0.0/16 flags A/A 7 1.1 christos # 8 1.1 christos # block incoming connection requests to my internal network from the big bad 9 1.1 christos # internet. 10 1.1 christos # 11 1.1 christos block in on le0 proto tcp from any to 10.1.0.0/16 flags S/SA 12 1.1 christos # to block the replies: 13 1.1 christos block out on le0 proto tcp from 10.1.0.0 to any flags SA/SA 14