1.1 ! dm 1: # ! 2: # block all incoming TCP packets on le0 from host "foo" to any destination. ! 3: # ! 4: block in on le0 proto tcp from foo/32 to any