#

# block all incoming TCP packets on le0 from host 10.1.1.1 to any destination.

#

block in on le0 proto tcp from 10.1.1.1/32 to any