you shall not pass

from here

if your firewall isn't set up this way (denying all except the fewest trusted exceptions possible) then you might wanna change that.