# Algumas macros
rede = "sis0"
loc = "lo0"
privnet = "{ 127.0.0.0/8, 192.168.0.0/16, 172.16.0.0/12, 10.0.0.0/8 }"
tcp_port = "{ 80, 113, 22, 443, 1863, 6667 }"

# Opçoes
set block-policy return
set loginterface $rede

# Scrub
scrub in all

# Filtragem
block all
pass quick on $loc all
block drop in quick on $rede from $privnet to any
block drop out quick on $rede from any to $privnet
pass in on $rede inet proto tcp from any to $rede port $tcp_port flags S/SA keep state
pass out on $rede proto tcp all modulate state flags S/SA
pass out on $rede proto { udp, icmp } all keep state