# pfctl -sr
scrub all no-df random-id fragment reassemble
block return all
pass quick on re0 all
block drop in quick on ! lo inet from 127.0.0.0/8 to any
block drop in quick inet from 127.0.0.1 to any
block drop in quick on ! re0 inet from 192.168.1.0/24 to any
block drop in quick inet from 192.168.1.5 to any
anchor "ftp-proxy/*" all
block drop in quick on xl0 from <private> to any
block drop out quick on xl0 from any to <private>
block drop inet proto tcp from any to any port = 1863
pass out on xl0 inet proto tcp from <ti> to any port = 1863 flags S/SA modulate state
pass in quick inet proto icmp all icmp-type echoreq keep state
pass in quick on xl0 inet proto tcp from any to (xl0) port = pptp flags S/SA modulate state
pass in quick on xl0 inet proto gre from any to (xl0) keep state
pass quick on tun all
pass out quick on xl0 inet proto tcp all flags S/SA modulate state
pass out quick on xl0 inet proto udp all keep state
pass out quick on xl0 inet proto icmp all keep state
#