pass out on gif0 proto udp all keep frag
block out all with bad