on 3.2-stable
# pfctl -n -f -
pass out quick on xl0 proto { tcp, udp, icmp } from any to any flags S keep state
pass out quick on xl0 proto { tcp, udp, icmp } from xl0 to any flags S keep state
stdin:3: icmp version does not match address family
stdin:3: skipping filter rule due to errors
pfctl: Syntax error in file: pf rules not loaded
#
temporary fix:
# pfctl -n -f -
pass out quick on xl0 proto { tcp, udp } from xl0 to any flags S keep state
pass out quick on xl0 proto icmp from any to any keep state
#
