/etc/pf.conf
block in all pass out all keep state
OpenBSD 4.1 onwards:
# minimal rule set, OpenBSD 4.1 keeps state by default block in all pass out all
enable with
$ sudo pfctl -ef /etc/pf.conf