1block in all 2block in proto tcp all 3block in proto { tcp, udp } all 4 5block in from any to any 6block in from 10.0.0.0/8 to any 7block in from ! 10.0.0.0/8 to any 8block in from { 10.0.0.0/8, 172.16.0.0/12 } to any 9 10block in proto tcp from any port = ssh to any 11block in proto tcp from any port { ssh, ftp >< 2048, != 1234, >= www } \ 12 to any port 1024:2048 13 14block in proto { tcp, udp } from { 10.0.0.0/8, 172.16.0.0/12 } port { ssh, ftp } \ 15 to { 192.168.0.0/16, 12.34.56.78 } port { 6667, 6668, 6669:65535 } 16 17