pass in log quick on $ext_if inet \ from !<bogons> to ($ext_if:0) \ tag OKOUTSIDE2INSIDE keep state # pass out log quick on $int_if inet \ tagged OKOUTSIDE2INSIDE keep state