scrub in all fragment reassemble
block return in log all
block return in from no-route to any
pass out all keep state
pass inet proto icmp all
block drop in on ! rl0 inet from 192.168.2.0/24 to any
block drop in on rl0 inet6 from fe80::230:bdff:fe71:e34f to any
block drop in inet from 192.168.2.101 to any
pass in quick on rl0 proto udp from any to any port = netbios-ns keep state
pass in quick on rl0 proto udp from any to any port = netbios-dgm keep state
pass in quick on rl0 proto tcp from any to any port = ssh keep state
pass in quick on rl0 proto tcp from any to any port = microsoft-ds keep state
pass in quick on rl0 proto tcp from any to any port = netbios-ns keep state
pass in quick on rl0 proto tcp from any to any port = netbios-ssn keep state
block return on rl0 from <blacklist> to any