I'm trying to do something that I thought would be relatively simple: Block all the traffic to a test server, other than my company's subnet.
I've tried things along these lines (18.104.22.168 is my placeholder for this example), but only the block seems to work:
block in all pass in from 22.214.171.124 pass in on en0 from 126.96.36.199 pass in all from 188.8.131.52
None of those pass in lines seem to work (I know some of those might throw a syntax error, as I'm just grabbing all the lines I've commented out while testing).
Is this less simple than I assumed? Am I missing something obvious?