1pass in on ppp0(!) inet from ppp0/peer to ppp0/32 2block in on hme0(!) inet from any to hme0/bcast 3pass in on bge0(!) inet from bge0/net to bge0/32 4block in on eri0(!) inet from any to eri0/netmasked 5