ping: icmp - visse pakketyper
icmp_typer = "echoreq" # [...] pass inet proto icmp all icmp-type $icmp_typer keep state
traceroute trenger hjelp, men har fast formel:
# allow out the default range for traceroute(8): # "base+nhops*nqueries-1" (33434+64*3-1) pass out on $ytre inet proto udp from any to any port 33433 >< 33626 keep state
Slikt man finner i listearkiver - openbsd-misc (f. eks. http://marc.theaimsgroup.com/)