rede = "tun0"
set optimization normal
set require-order yes
set fingerprints "/etc/pf.os"
set skip on lo0
scrub all reassemble tcp
scrub out all no-df max-mss 1492 random-id
rdr pass on { $rede } proto tcp to port 80 -> 127.0.0.1 port 8080
# bloqueia nmap fingerprint
block in quick proto tcp flags FUP/WEUAPRSF
block in quick proto tcp flags WEUAPRSF/WEUAPRSF
block in quick proto tcp flags SRAFU/WEUAPRSF
block in quick proto tcp flags /WEUAPRSF
block in quick proto tcp flags SR/SR
block in quick proto tcp flags SF/SF
block drop in quick on tun0 from any os { NMAP }
#libera ping e trace route
pass out log on { $rede } inet proto icmp all icmp-type 8 code 0 keep state
pass in log on { $rede } inet proto icmp all icmp-type 8 code 0 keep state