set skip on lo

block all
match in all scrub (no-df random-id)

pass in quick on vio0 proto { icmp, icmp6 } to any
pass in quick on vio0 proto tcp to any port ssh
pass in quick on vio0 proto tcp to any port http
pass in quick on vio0 proto tcp to any port https
pass in quick on vio0 proto tcp to any port 40004 # znc irc
pass in quick on vio0 proto tcp to any port 40080 # znc web
pass in quick on vio0 proto tcp to any port 8999 # znc all
pass in quick on vio0 proto tcp to any port 3010:3020 # irc dcc
pass in quick on vio0 proto tcp to any port 2771:2773 # irssiproxy
pass in quick on vio0 proto tcp to any port 5000 # perl dancer2 test port

pass out on vio0 from any to any keep state