First rule set - single machine

/etc/pf.conf

block in all
pass out all keep state

OpenBSD 4.1 onwards:

# minimal rule set, OpenBSD 4.1 and newer keeps state by default
block in all
pass out all

enable with

$ sudo pfctl -ef /etc/pf.conf