block in all pass in quick on bge0 proto tcp from any to any port = shell flags S keep state block out all