# allow orkut to <ti>.
pass in quick on $central_int inet proto tcp from <ti> to <orkut> \
        port { http, https } modulate state flags S/SA

# block orkut.
block in quick on $central_int inet proto tcp from any to <orkut> \
        port { http, https }