#flags X is invalid; flags X/XY must be used

pass proto tcp flags S
pass proto tcp flags S/