language flexibility OpenBSD 3.2: block in all block return-rst in proto tcp all block return-icmp in proto udp all block out all block return-rst out proto tcp all block return-icmp out proto udp all OpenBSD 3.3 allows: block return