pfSense

#---------------------------------------------------------------------------

# default deny rules

#---------------------------------------------------------------------------

block in $log inet6 all label "Default deny rule IPv6"

block out $log inet6 all label "Default deny rule IPv6"

# We use the mighty pf, we cannot be fooled.

block quick inet proto { tcp, udp } from any port = 0 to any

block quick inet proto { tcp, udp } from any to any port = 0

EOD;