I need to block one incoming port with pf. I'm new to pf, and I can't figure out what I'm doing wrong here.Here is my entire rule file, made to block incoming port 22:set block-policy droppass in all keep statepass out all keep stateblock in proto tcp to port 22After I start pf with sudo /sbin/pfctl -e -f /path/to/my/rule/file, all my network traffic is blocked. I try to load a webpage, and it won't load until I do sudo /sbin/pfctl -d to disable pf.If I remove the fourth line (block in proto tcp to port 22) from my rule list, nothing is blocked. So what did I do wrong on the fourth line that is causing it to block everything instead of just incoming TCP port 22? All the examples did this similarly.If it matters, my OS is OS X 10.8.5.
pf blocks all in/out traffic instead of just the one port I wanted to block
osx;firewall;pf
block allpass in on fxp0 proto tcp from any to any port 22 flags S/SApass out on fxp0 proto tcp from any to any port 22 flags S/SAPlease consider you have to change fxp0 to your ethernet according to your operating OS.Reverse of above:pass in on fxp0 proto tcp from any to any port < 22 flags S/SApass out on fxp0 proto tcp from any to any port < 22 flags S/SApass in on fxp0 proto tcp from any to any port > 22  flags S/SApass out on fxp0 proto tcp from any to any port > 22 flags S/SAblock in on fxp0 proto tcp from any to any port 22 block out on fxp0 proto tcp from any to any port 22 