Anchors - common criteria 2

Here we lump together egress related rules:

anchor ext on egress {
       match out proto tcp to port { www https } set queue (qweb, qpri) set prio (5,6)
       match out proto { tcp udp } to port domain set queue (qdns, qpri) set prio (6,7)
       match out proto icmp set queue (q_dns, q_pri) set prio (7,6)
       pass in log proto tcp to port smtp rdr-to 127.0.0.1 port spamd queue spamd
       pass in log proto tcp from <nospamd> to port smtp
       pass in log proto tcp from <spamd-white> to port smtp
       pass out log proto tcp to port smtp
       pass log (all) proto { tcp, udp } to port ssh keep state (max-src-conn 15, \
            max-src-conn-rate 7/3, overload <bruteforce> flush global)
}