#

# block all incoming TCP connections but send back a TCP-RST for ones to

# the ident port

#

block in proto tcp from any to any flags S/SA

block return-rst in quick proto tcp from any to any port = 113 flags S/SA

#

# block all inbound UDP packets and send back an ICMP error.

#

block return-icmp in proto udp from any to any