block in all
pass out all
pass in proto tcp all port 1824 from x.y.0.0/16
pass in proto tcp all port 1824 from a.b.0.0/16
pass in proto tcp all port 1824 from d.e.0.0/16
pass in proto tcp all port 22 from 192.168.0.0/16
pass in proto udp all port 22 from 192.168.0.0/16
pass out proto tcp all port 22 to 192.168.0.0/16