Sets how packets match with state table entries.
possible values: floating and if-bound
default is floating, can be overridden for specific rules, ie
pass out on egress inet proto tcp to any port $allowed \ modulate state (if-bound)
Recommendation: leave as is