scrub in

block in all 

tcp_services = "{ ssh, smtp, domain, www, https, pop3, auth, pop3s }"
udp_services = "{ domain }"


pass out proto tcp to any port $tcp_services keep state
pass proto udp to any port $udp_services keep state


pass in proto tcp to any port 80 keep state