1block in on lo0 proto tcp from 192.168.0.0/24 to port 22 tag ssh 2block in quick on lo0 ! tagged ssh 3