pass inet proto icmp icmp-type $icmp_types from $int_if:network pass inet proto icmp icmp-type $icmp_types to $ext_if
Lets your traffic pass; hides the details of your local net