@1 block out log on kue0 all @1 block in log on kue0 all @1 block return-rst out log on kue0 proto tcp all @1 block return-rst in log on kue0 proto tcp all @1 block return-icmp out log on kue0 proto udp all @1 block return-icmp in log on kue0 proto udp all @1 block out log quick on kue0 from ! 157.161.48.183 to any @1 block in quick on kue0 from any to 255.255.255.255 @1 block in log quick on kue0 from 10.0.0.0/255.0.0.0 to any @1 block in log quick on kue0 from 172.16.0.0/255.240.0.0 to any @1 block in log quick on kue0 from 192.168.0.0/255.255.0.0 to any @1 block in log quick on kue0 from 255.255.255.255 to any @1 pass out on kue0 proto icmp all icmp-type echoreq code 0 keep state @1 pass in on kue0 proto icmp all icmp-type echoreq code 0 keep state @1 pass out on kue0 proto udp all keep state @1 pass in on kue0 proto udp from any to any port = domain keep state @1 pass out on kue0 proto tcp all modulate state @1 pass in on kue0 proto tcp from any to any port = ssh modulate state @1 pass in on kue0 proto tcp from any to any port = smtp modulate state @1 pass in on kue0 proto tcp from any to any port = domain modulate state @1 pass in on kue0 proto tcp from any to any port = auth modulate state