1block in all 2block out all 3pass out quick on ppp0 proto tcp all flags S keep state 4block return-rst in quick proto tcp all 5