00100 allow ip from any to any via lo*
00110 deny log ip from any to 127.0.0.0/8 in
00120 deny log ip from 127.0.0.0/8 to any in
00220 deny log ip from 10.1.2.0/24{8,38,60} to me
00320 allow ip from table(1) to me
00420 check-state
00520 allow ip from me to any out keep-state
00620 count ip from any to any
65534 deny ip from any to any
65535 allow ip from any to any