# First flush the firewall rules
-f flush

# Localhost rules
add 100 allow all from any to any via lo*

# Prevent any traffic to 127.0.0.1, common in localhost spoofing
add 110 deny log all from any to 127.0.0.0/8 in
add 110 deny log all from 127.0.0.0/8 to any in

add 200 allow log tcp from 192.168.0.2 to any 25
add 210 allow log tcp from any 25 to 192.168.0.2 25

#add deny log tcp from 192.168.0.5 to any 25

add 260 deny log tcp from any to any 25
add 270 deny log tcp from any 25 to any

#Testing rules, to find ports used by services if we aren't sure. These rules allow ALL traffic to pass through the firewall, disabling any subsequent rules
#add 140 allow log logamount 500 tcp from any to any
#add 150 allow log logamount 500 udp from any to any

#add check-state
#add pass all from me to any out keep-state
#add count log ip from any to any