Mar 11 11:08:09 restricted dhcpd: icmp_echorequest 192.168.2.200: No route to host
Mar 11 11:08:09 restricted dhcpd: icmp_echorequest 192.168.2.200: No route to host
Mar 11 11:10:27 restricted dhcpd: icmp_echorequest 192.168.2.200: No route to host
Mar 11 11:21:34 restricted dhcpd: IP address 192.168.2.200 answers a ping after sending a release
Mar 11 11:21:34 restricted dhcpd: Possible release spoof - Not releasing address 192.168.2.200

ext_if="fxp0"
int_if="xl0"
wlan_if="wi0"

set skip on { lo $int_if $wlan_if }
set block-policy drop

scrub in
scrub out all random-id

nat on $ext_if from !($ext_if) -> ($ext_if:0)

block log all
pass quick on lo0 all
pass out on { $ext_if $int_if $wlan_if } modulate state
pass in quick inet proto icmp from any to self icmp-type echoreq keep state
pass in on $ext_if inet proto tcp from any to any port 80 keep state