1*57718be8SEnji Cooperblock in all 2*57718be8SEnji Cooperblock out all 3*57718be8SEnji Cooperpass in proto udp from any to any keep state 4*57718be8SEnji Cooperpass in proto tcp from any to any flags S keep state 5