Here is it.
Code:
# Macros
int_if="vic0"
#scrub
scrub in all
# Filtering rules
pass in on $int_if proto tcp from any to $int_if port www
pass out on $int_if proto tcp from $int_if to any port www
block in log quick on $int_if proto tcp from any to any port ssh flags S/SA
#Antispoof
antispoof log for $int_if inet
#Unicast reverse path forwarding
block in log quick from urpf-failed label uRPF
#Passive operating system fingerprinting
pass in log on $int_if from any os OpenBSD keep state
block in log on $int_if from any os "Windows 2000"
block in log on $int_if from any os "Windows XP"
block in log on $int_if from any os "Windows XP SP1"
block in log on $int_if from any os "Windows XP SP2"
block in log on $int_if from any os "Windows xP SP3"
block in log on $int_if from any os "Windows 98"
block in log on $int_if from any os "Windows NT"
block in log on $int_if from any os "Linux 2.4 ts"
block in log on $int_if from any os unknown
# return
block return
#Block ICMP redirect packets
block in log quick on $int_if inet proto icmp from any to $int_if
block in log quick on $int_if inet proto icmp from any to $int_if icmp-type redir
#Block SMTP(simple mail transfer protocol)
block in log quick on $int_if inet proto tcp from any to $int_if port smtp
#pass out UDP and ICMP
pass out on $int_if inet proto udp all keep state
pass out on $int_if inet proto icmp from $int_if to any keep state
#Block everything
block return-rst in log quick on $int_if inet proto tcp from any to $int_if
block return-icmp in log quick on $int_if inet proto udp from any to $int_if
block in quick on $int_if all