122514Sdarrenr# 222514Sdarrenr# block all TCP packets with only the SYN flag set (this is the first 322514Sdarrenr# packet sent to establish a connection) out of the SYN-ACK pair. 422514Sdarrenr# 522514Sdarrenrblock in proto tcp from any to any flags S/SA 6