pass in all
pass in from any to any
pass in from any port <= 1024 to any
pass in from any to any port = 25
pass in from 10.0.0.0/8 port > 1024 to ! 10.1.2.3 port != 22