1pass in all 2pass in from any to any 3pass in from any port <= 1024 to any 4pass in from any to any port = 25 5pass in from 10.0.0.0/8 port > 1024 to ! 10.1.2.3 port != 22 6