# Firewall

### Show rules

```sh
pfctl -sr    # view rules
pfctl -ss    # view state
pfctl -si    # view stats
pfctl -sa    # view all
```

### Write rules

`/etc/pf.conf`

```sh
lan = stge0
block out tcp from $lan to any port {80,443}
```

### Apply rules

```sh
pfctl -d
pfctl -f /etc/pf.conf
pfctl -e
```