Greetings BSD Cafe', I have been playing around with the NetBSD packet filter. Based on my understanding, I presume the following would pass as a basic filter for a stand alone host firewall. Its not clean but perhaps adequate enough?$ext_if = { inet4(wm0) } # LAN Connection group "external" on $ext_if { pass stateful out final all block all } group default { pass final on lo0 all block all }#NetBSD #npf