# Simple firewall

table <martians> const   file "/etc/pf.martians"
table <filtered> persist file "/etc/pf.filtered"

set require-order no
set skip on lo0

scrub out
scrub in random-id

block drop in

pass in on ne3 proto tcp from any to any port ssh
pass in on ne3 proto tcp from any to any port www
pass in on ne3 proto tcp from any to any port https
pass in on ne3 proto ipv6-icmp

pass out