1pass in inet proto icmp all keep state 2pass in inet6 proto ipv6-icmp all keep state 3block drop in inet proto icmp all 4block drop in inet6 proto ipv6-icmp all 5block return-rst in inet proto tcp all 6block return-rst in inet6 proto tcp all 7block return-rst(ttl 10) in inet proto tcp all 8block return-rst(ttl 10) in inet6 proto tcp all 9block return-icmp(port-unr) in inet proto icmp all 10block return-icmp(net-unr) in inet proto icmp all 11block return-icmp(net-unr) in inet proto icmp all 12block return-icmp(srcfail) in inet proto icmp all 13block return-icmp(srcfail) in inet proto icmp all 14block return-icmp(host-prohib) in inet proto icmp all 15block return-icmp(host-prohib) in inet proto icmp all 16block return-icmp(cutoff-preced) in inet proto icmp all 17block return-icmp(cutoff-preced) in inet proto icmp all 18block return-icmp6(port-unr) in inet6 proto ipv6-icmp all 19block return-icmp6(noroute-unr) in inet6 proto ipv6-icmp all 20block return-icmp6(noroute-unr) in inet6 proto ipv6-icmp all 21block return-icmp6(admin-unr) in inet6 proto ipv6-icmp all 22block return-icmp6(admin-unr) in inet6 proto ipv6-icmp all 23block return-icmp6(notnbr-unr) in inet6 proto ipv6-icmp all 24block return-icmp6(notnbr-unr) in inet6 proto ipv6-icmp all 25block return-icmp6(addr-unr) in inet6 proto ipv6-icmp all 26block return-icmp6(addr-unr) in inet6 proto ipv6-icmp all 27block return-icmp6(port-unr) in inet6 proto ipv6-icmp all 28block return-icmp6(port-unr) in inet6 proto ipv6-icmp all 29block return-icmp(srcfail, admin-unr) in all 30block return-icmp(srcfail, admin-unr) in all 31