interface:network - the network connected to interface
Your local net could be
localnet = $int_if:network
or network as 192.168.100.0/24, or fec0:dead:beef::/64 or a list of networks -
sample filtering rule:
pass inet proto tcp from $localnet to any port $ports keep state
Make it as simple as possible, but no simpler