[denta]

Hello, assuming you are not running a bunch of services on the machine, maybe I'd go with something like

block all
pass out keep state

It will allow traffic that you initiate yourself, and block everything else.