pass log (user) all flags S/SA keep state
pass log (all) all flags S/SA keep state
pass log (to pflog7) all flags S/SA keep state
block drop log (all, user, to pflog1) all
block drop log (user, to pflog1) all