#icmp
pass in proto icmp from any to any
pass out proto icmp from any to any
#tracerroute
pass out inet proto udp from any to any port 33433 >< 33626
#whois
pass proto tcp from any to any port 43
pass proto tcp from any port 43 to any
#ftp
pass proto tcp from any to any port 21
pass proto tcp from any to any port > 49151