# Allow all on loopback
pass in quick on lo0 all
pass out quick on lo0 all

# Allow all on private interfaces
pass in quick on net1 all
pass out quick on net1 all

# Allow outgoing on public interfaces
pass out from any on net0 all

# Allow pings and ssh
pass in quick on net0 proto icmp all keep state
pass in quick on net0 proto tcp all port=22 keep state

# Disallow all incoming on public interfaces
block in from any on net0 all