block drop in log on em0 all
block drop in log on tun0 all
anchor "f2b/*" all
block drop in log quick on em0 from <badhosts> to any
block drop in log quick on em0 inet proto udp from any port < 1024 to 151.80.42.211 port = domain
block drop in quick on em0 inet proto udp from any to 224.0.0.102 port = 1985
block drop in quick on em0 inet proto udp from any to 255.255.255.255 port = bootpc
block drop in log quick on em0 proto tcp from <blockedwebspam> to any port = http
block drop in log quick on em0 proto tcp from <blockedwebspam> to any port = https
block drop in log quick on em0 from <blockedips> to any
pass in on em0 proto tcp from any to any port = ssh flags S/SA keep state
pass in on em0 proto tcp from any to any port = imap flags S/SA keep state
pass in on em0 proto tcp from any to any port = imaps flags S/SA keep state
pass in on em0 proto tcp from any to any port = smtp flags S/SA keep state
pass in on em0 proto tcp from any to any port = submission flags S/SA keep state
pass in on em0 proto tcp from any to any port = domain flags S/SA keep state
pass in on em0 proto tcp from any to any port = http flags S/SA keep state
pass in on em0 proto tcp from any to any port = https flags S/SA keep state
pass in on em0 proto tcp from any to any port = ftp flags S/SA keep state
pass in on em0 proto tcp from any to any port = 9333 flags S/SA keep state
pass in on em0 inet6 proto ipv6-icmp all icmp6-type echoreq keep state
pass in on em0 inet6 proto ipv6-icmp all icmp6-type routersol keep state
pass in on em0 inet6 proto ipv6-icmp all icmp6-type routeradv keep state
pass in on em0 inet6 proto ipv6-icmp all icmp6-type neighbradv keep state
pass in on em0 inet6 proto ipv6-icmp all icmp6-type neighbrsol keep state
pass in on em0 proto udp from any to any port = domain keep state
pass in on em0 proto udp from any to any port = openvpn keep state
pass in on em0 inet proto icmp all icmp-type echoreq keep state
pass in on em0 proto ipencap all keep state
pass out quick on em0 inet6 proto ipv6-icmp all icmp6-type echoreq keep state
pass out quick on em0 inet6 proto ipv6-icmp all icmp6-type routersol keep state
pass out quick on em0 inet6 proto ipv6-icmp all icmp6-type routeradv keep state
pass out quick on em0 inet6 proto ipv6-icmp all icmp6-type neighbradv keep state
pass out quick on em0 inet6 proto ipv6-icmp all icmp6-type neighbrsol keep state
pass out quick on em0 proto udp from any to any port = domain keep state
pass out quick on em0 proto udp from any to any port = ntp keep state
pass out quick on em0 proto udp from any to any port = 6277 keep state
pass out quick on em0 proto udp from any to any port = 24441 keep state
pass out quick on em0 proto tcp from any to any port = domain flags S/SA keep state
pass out quick on em0 proto tcp from any to any port = ntp flags S/SA keep state
pass out quick on em0 proto tcp from any to any port = 2703 flags S/SA keep state
pass out log all flags S/SA keep state