# pfctl -sr
scrub all no-df random-id fragment reassemble
block return log all
block drop in on ! re0 inet from 192.168.1.0/24 to any
block drop in inet from 192.168.1.5 to any
anchor "ftp-proxy/*" all
pass quick on re0 all
block drop inet proto tcp from any to any port = 1863
pass out on xl0 inet proto tcp from <ti> to any port = 1863 flags S/SA modulate state
pass in quick inet proto icmp all icmp-type echoreq keep state
pass in quick on xl0 inet proto tcp from any to (xl0) port = pptp flags S/SA modulate state
pass in quick on xl0 inet proto gre from any to (xl0) keep state
pass quick on tun all
pass out quick on xl0 inet proto tcp all flags S/SA modulate state
pass out quick on xl0 inet proto udp all keep state
pass out quick on xl0 inet proto icmp all keep state