1*7309c551SKristof Provostmatch log (matches) inet proto tcp all 2*7309c551SKristof Provostmatch log (matches) inet from 192.0.2.0/24 to any 3*7309c551SKristof Provostpass all flags S/SA keep state 4