block tcp {src} {src port} {dest} {dest port} reject tcp * * 192.168.9.4 80 But really it depends on the firewall itself: 10.10.0.0/24 Any 192.168.0.0/24 443 Deny is another example.