1block in all 2pass out quick on ppp0 proto tcp from any to any port = ftp flags S keep state 3block out all 4