1 block out log quick on qfe0 from 192.168.7.0/24 to any 2 block out log quick on nf0 from 192.168.6.0/24 to any 3 pass in quick on nf0 proto tcp from any to any port = 111 flags S keep state 4 pass in quick on nf0 proto udp from any to any port = 111 keep state 5 block return-rst in log quick on nf0 proto tcp from any to any 6 block in log quick on nf0 from 192.168.7.0/24 to any 7 block return-rst in log quick on qfe0 proto tcp from any to any 8 block in log quick on qfe0 from 192.168.6.0/24 to any 9 10