1block in all 2pass out quick on bge0 proto tcp from any to any port = shell flags S keep state 3block out all 4