block in all block out all antispoof log quick for fxp0 inet pass in on fxp0 proto tcp from any to any port ssh