1*bc4097aaSchristos# $NetBSD: example.6,v 1.1.1.1 2012/03/23 21:20:15 christos Exp $ 2*bc4097aaSchristos# 3*bc4097aaSchristos# block all TCP packets with only the SYN flag set (this is the first 4*bc4097aaSchristos# packet sent to establish a connection) out of the SYN-ACK pair. 5*bc4097aaSchristos# 6*bc4097aaSchristosblock in proto tcp from any to any flags S/SA 7