# TODO: Allow in ICMP(v6) by message type
# TODO: Rate-limit ssh

$services = { mdns, ssh }

group "localhost" in on lo0 {
      pass stateful all
}

group default {
      # Default rule
      block all

      pass stateful in proto { tcp, udp } to any port $services

      # Let it goooooo
      pass stateful out all
}