1 # $NetBSD: example.6,v 1.1.1.1 2012/03/23 21:20:15 christos Exp $
2 #
3 # block all TCP packets with only the SYN flag set (this is the first
4 # packet sent to establish a connection) out of the SYN-ACK pair.
5 #
6 block in proto tcp from any to any flags S/SA
7