example.6 revision 1.1.1.1.2.2
1# $NetBSD: example.6,v 1.1.1.1.2.2 2012/04/17 00:03:24 yamt Exp $
2#
3# block all TCP packets with only the SYN flag set (this is the first
4# packet sent to establish a connection) out of the SYN-ACK pair.
5#
6block in proto tcp from any to any flags S/SA
7