scrub in all fragment reassemble block return in log all block return in from no-route to any pass out all keep state pass inet proto icmp all block drop in on ! rl0 inet from 192.168.2.0/24 to any block drop in on rl0 inet6 from fe80::230:bdff:fe71:e34f to any block drop in inet from 192.168.2.101 to any pass in quick on rl0 proto udp from any to any port = netbios-ns keep state pass in quick on rl0 proto udp from any to any port = netbios-dgm keep state pass in quick on rl0 proto tcp from any to any port = ssh keep state pass in quick on rl0 proto tcp from any to any port = microsoft-ds keep state pass in quick on rl0 proto tcp from any to any port = netbios-ns keep state pass in quick on rl0 proto tcp from any to any port = netbios-ssn keep state block return on rl0 from to any