ext_if="vr0"

set block-policy return

set skip on { lo }

scrub in

pass out keep state

block in

pass in on $ext_if inet proto tcp from any to any port { 20, 21, 22, 25, 53, 80, 110, 113, 143 } keep state

pass in on $ext_if inet proto udp from any to any port 53 keep state

pass in on $ext_if inet proto icmp from any to any keep state