# Wireless interface (802.11b) wifi_if="wi0" # Let authenticated WiFi clients do pretty much anything. pass in quick on $wifi_if proto { udp icmp } from $user_ip to any keep state pass in quick on $wifi_if proto tcp from $user_ip to any flags S/SA keep state