block in log quick from any to any with ipopts
block in log quick proto tcp from any to any with short
pass out on rtls0 all head 150
block out from 127.0.0.0/8 to any group 150
block out from any to 127.0.0.0/8 group 150
block out from any to 192.168.0.2/32 group 150
pass in on rtls0 all head 100
block in from 127.0.0.0/8 to any group 100
block in from 192.168.0.2/32 to any group 100