# Don't block outgoing traffic
pass out quick on rl0 proto tcp all keep state
pass out quick on rl0 proto udp all keep state
pass out quick on rl0 proto icmp all keep state
# Local addresses which I don't use
block in quick on rl0 from 172.16.0.0/12 to any
block in quick on rl0 from 10.0.0.0/8 to any
block in quick on rl0 from 127.0.0.0/8 to any
block in quick on rl0 from 192.0.2.0/24 to any
# Services which i run on this machine
pass in quick on rl0 proto tcp from any to any port = 22 #SSH
pass in quick on rl0 proto tcp from any to any port = 25 #SMTP
pass in quick on rl0 proto tcp/udp from any to any port = 53 #DNS
pass in quick on rl0 proto tcp from any to any port = 80 #WWW
pass in quick on rl0 proto tcp/udp from 192.168.0.0/24 to any port 137 >< 139 #Samba
pass in quick on rl0 proto tcp/udp from 192.168.0.0/24 to any port = 445 #Samba
pass in quick on rl0 proto tcp from any to any port = 993 #IMAPDSSL
# Block everything else
block in log first on rl0 all