| pass in on ed0(!) proto tcp from 127.0.0.1/32 to 127.0.0.1/32 port = 23 keep state |
| block in log first on lo0(!) proto tcp/udp from any to any keep state |
| pass in proto udp from 127.0.0.1/32 to 127.0.0.1/32 port = 20499 keep frags |
| pass in proto udp from 127.0.0.1/32 to 127.0.0.1/32 port = 53 keep state keep frags |
| pass in on ed0(!) out-via vx0(!) proto udp from any to any keep state |
| pass out on ppp0(!) in-via le0(!) proto tcp from any to any keep state |
| pass in proto tcp from any port > 1024 to 127.0.0.1/32 port = 1024 keep state |
| pass in proto tcp from any to any flags S/FSRPAU keep state (limit 101,strict,newisn,no-icmp-err) |