# first M2 smoke: allow everything on lan/wan, block icmp to blackhole
pass in quick on lan
pass out quick
block drop in quick proto icmp from any to 10.0.2.99