#
# block all outgoing TCP packets on le0 from any host to port 23 of
# host 10.1.1.2
block out on le0 proto tcp from any to 10.1.1.3/32 port = 23