pass out all keep state pass quick on $int_if no state
pass in log quick on $int_if inet \ from ($int_if:network) to any \ tag OKPKTS keep state # pass out log quick on $ext_if inet \ tagged OKPKTS keep state