xref: /freebsd/share/examples/ipfilter/rules/example.6 (revision 41edb306f05651fcaf6c74f9e3557f59f80292e1)
1#
2# block all TCP packets with only the SYN flag set (this is the first
3# packet sent to establish a connection) out of the SYN-ACK pair.
4#
5block in proto tcp from any to any flags S/SA
6