pass in log quick on $ext_if proto tcp from any to <ph_srvs> port $ph_srv_tcp flags S/SA keep state
pass in log quick on $ext_if proto udp from any to <ph_srvs> port $ph_srv_udp keep state
pass out log quick on $ext_if proto tcp from <ph_srvs> to any flags S/SA keep state
pass out log quick on $ext_if proto { udp, icmp } from <ph_srvs> to any keep state
block in log quick on $ext_if to <ph_srvs>

pass in all
pass out all