# Macros
outside="tun0"
inside="xl0"
loop="lo0"
localNet="172.16.3.0/24"

# Options
set skip on $loop
set optimization normal
set block-policy drop
scrub all

# NAT
nat on $outside from !($outside) -> ($outside)

# Rules
pass quick on { $loop $inside }

pass out quick on $outside proto { tcp udp } from $localNet to any port domain keep state
pass out quick on $outside proto tcp from $localNet to any port http keep state
block log all