1*57718be8SEnji Cooperpass in on ed0(!) inet proto tcp from 127.0.0.1/32 to 127.0.0.1/32 port = 23 keep state # count 0 2*57718be8SEnji Cooperblock in log first on lo0(!) proto tcp/udp from any to any port = 7 keep state # count 0 3*57718be8SEnji Cooperpass in inet proto udp from 127.0.0.1/32 to 127.0.0.1/32 port = 20499 keep frags 4*57718be8SEnji Cooperpass in inet proto udp from 127.0.0.1/32 to 127.0.0.1/32 port = 2049 keep frags (strict) 5*57718be8SEnji Cooperpass in inet proto udp from 127.0.0.1/32 to 127.0.0.1/32 port = 53 keep state keep frags # count 0 6*57718be8SEnji Cooperpass in on ed0(!) out-via vx0(!) proto udp from any to any keep state # count 0 7*57718be8SEnji Cooperpass out on ppp0(!) in-via le0(!) proto tcp from any to any keep state # count 0 8*57718be8SEnji Cooperpass in on ed0(!),vx0(!) out-via vx0(!),ed0(!) proto udp from any to any keep state # count 0 9*57718be8SEnji Cooperpass in inet proto tcp from any port > 1024 to 127.0.0.1/32 port = 1024 keep state # count 0 10*57718be8SEnji Cooperpass in proto tcp from any to any flags S/FSRPAU keep state (limit 101,strict,newisn,no-icmp-err,age 600/600) # count 0 11*57718be8SEnji Cooperpass in proto tcp from any to any flags S/FSRPAU keep state (limit 101,loose,newisn,no-icmp-err,age 600/600) # count 0 12*57718be8SEnji Cooperpass in proto udp from any to any keep state (sync,age 10/20) # count 0 13