scrub in on fxp0 all fragment reassemble
scrub out on fxp0 all random-id fragment reassemble
block return quick inet6 all
block drop in quick on ! lo0 inet from 127.0.0.0/8 to any
block drop in quick on ! lo0 inet6 from ::1 to any
block drop in quick on ! fxp0 inet from 67.173.57.0/24 to any
block drop in quick on fxp0 inet6 from fe80::2a0:c9ff:fe0c:496b to any
block drop in quick inet from 67.173.57.194 to any
block drop in quick on ! xl0 inet from 192.168.1.0/24 to any
block drop in quick inet from 192.168.1.105 to any
block drop in quick on xl0 inet6 from fe80::201:3ff:fe1a:c299 to any
block return log all
pass out log on fxp0 inet proto udp from any to any port = 1604 keep state
pass out log on fxp0 inet proto udp from any to any port = ntp keep state
pass out log on fxp0 inet proto udp from any to any port = domain keep state
pass out log on fxp0 inet proto tcp from any to any port = 1494 flags S/SA modulate state
pass out log on fxp0 inet proto tcp from any to any port = 5999 flags S/SA modulate state
pass out log on fxp0 inet proto tcp from any to any port = www flags S/SA modulate state
pass out log on fxp0 inet proto tcp from any to any port = https flags S/SA modulate state
pass out log on fxp0 inet proto tcp from any to any port = pop3 flags S/SA modulate state
pass out log on fxp0 inet proto tcp from any to any port = whois flags S/SA modulate state
pass out log on fxp0 inet proto tcp from any to any port = domain flags S/SA modulate state
pass out log on fxp0 inet proto tcp from any to any port = ssh flags S/SA modulate state
pass out log on fxp0 inet proto tcp from any to any port = ftp flags S/SA modulate state
pass out log on fxp0 inet proto tcp from any to any port = ftp-data flags S/SA modulate state
pass out log on fxp0 inet proto tcp from any to any port = auth flags S/SA modulate state
pass out log on fxp0 inet proto tcp from any to any port = ntp flags S/SA modulate state
pass out log on fxp0 inet proto tcp from any to any port = nntp flags S/SA modulate state
block return quick inet proto tcp from 192.168.2.200 to any port = smtp
pass out log on fxp0 inet proto tcp from 67.173.57.194 to any port = smtp flags S/SA modulate state
block return out on fxp0 inet proto tcp from 192.168.2.200 to any port = smtp
pass in on fxp0 inet6 proto tcp from any to fe80::2a0:c9ff:fe0c:496b port = ssh flags S/SA keep state
pass in on fxp0 inet proto tcp from any to 67.173.57.194 port = ssh flags S/SA keep state
pass in on fxp0 inet proto tcp from any to 127.0.0.1 port = spamd flags S/SA keep state
pass in on fxp0 inet6 proto tcp from any to ::1 port = spamd flags S/SA keep state
pass in log quick inet proto icmp from any to 127.0.0.1 icmp-type echoreq keep state
pass in log quick inet proto icmp from any to 67.173.57.194 icmp-type echoreq keep state
pass in log quick inet proto icmp from any to 192.168.1.105 icmp-type echoreq keep state
pass in log quick inet proto icmp from any to 192.168.2.1 icmp-type echoreq keep state
pass in log on fxp0 inet proto tcp from any to 192.168.1.50 port = ftp-data keep state
pass in log on fxp0 inet proto tcp from any to 192.168.1.50 port = ftp keep state
pass in on fxp0 inet proto tcp from any to 127.0.0.1 port = smtp flags S/FSRPAU synproxy state
pass in on xl0 inet proto tcp from any to 127.0.0.1 port = imaps flags S/FSRPAU keep state
pass log on xl0 all