1*57718be8SEnji Cooperblock out all 2*57718be8SEnji Cooper100 pass in all 3*57718be8SEnji Cooper10101 pass out proto tcp from any to any 4