Sets how packets match with state table entries.
possible values: floating and if-bound
default is floating, can be overridden for specific rules, ie
pass out on egress inet proto tcp to any port $allowed \
modulate state (if-bound) Recommendation: leave as is