1*7c478bd9Sstevel@tonic-gate# 2*7c478bd9Sstevel@tonic-gate# block all TCP packets with only the SYN flag set (this is the first 3*7c478bd9Sstevel@tonic-gate# packet sent to establish a connection) out of the SYN-ACK pair. 4*7c478bd9Sstevel@tonic-gate# 5*7c478bd9Sstevel@tonic-gateblock in proto tcp from any to any flags S/SA 6