rede = "tun0"

set optimization normal
set require-order yes
set fingerprints "/etc/pf.os"
set skip on lo0

scrub all reassemble tcp
scrub out all no-df max-mss 1492 random-id

rdr pass on { $rede } proto tcp to port 80 -> 127.0.0.1 port 8080

# bloqueia nmap fingerprint
block in quick proto tcp flags FUP/WEUAPRSF
block in quick proto tcp flags WEUAPRSF/WEUAPRSF
block in quick proto tcp flags SRAFU/WEUAPRSF
block in quick proto tcp flags /WEUAPRSF
block in quick proto tcp flags SR/SR
block in quick proto tcp flags SF/SF

block drop in quick on tun0 from any os { NMAP }

#libera ping e trace route
pass out log on { $rede } inet proto icmp all icmp-type 8 code 0 keep state
pass in log on { $rede } inet proto icmp all icmp-type 8 code 0 keep state