The
inet/inet6 parameter is used to distinguish between IPv4 and IPv6, it is not in place of
in/out.
- If in/out are not specified, the rule matches both inbound and outbound packets.
- If inet/inet6 are not specified, the rule matches both packet families.
Just a reminder, if you're using the latest version of OpenBSD/pf, you'll need the second edition of The Book of PF.