| pass in from any to any | |
| block out from any to any | |
| log in from any to any | |
| log body in from any to any | |
| count in from any to any | |
| pass in from !any to any | |
| block in from any to !any | |
| pass in on ed0(!) from 127.0.0.1/32 to 127.0.0.1/32 | |
| block in log first on lo0(!) from any to any | |
| pass in log body quick from any to any | |
| block return-rst in quick on le0(!) proto tcp from any to any | |
| block return-icmp in on qe0(!) from any to any | |
| block return-icmp(host-unr) in on qe0(!) from any to any |