block in all pass out quick on bge0 proto tcp from any to any port = shell flags S keep state block out all