Litt strengere

/etc/pf.conf

tcp_tjenester = "{ ssh, smtp, domain, www, pop3, auth, pop3s }"
udp_tjenester = "{ domain }"

block all
pass out proto tcp to any port $tcp_tjenester keep state
pass proto udp to any port $udp_tjenester keep state

- last de nye reglene

peter@skapet:~$ sudo pfctl -f /etc/pf.conf