block in log quick from any to any with short
block in log quick from any to any with ipopts

block in on iprb0 all head 100
block out on iprb0 all head 150
pass in quick on iprb1 all
pass out quick on iprb1 all

block in log quick from 10.0.0.0/8 to any group 100
block in log quick from 172.16.0.0/12 to any group 100
block in log quick from 192.168.0.0/16 to any group 100

pass out quick proto icmp from any to any keep state group 150
pass out quick proto udp from any to any keep state group 150
pass out quick proto tcp from any to any flags S/SAFR keep state group 150