What is your local network, anyway?

interface:network - the network connected to interface

Your local net could be

localnet = $int_if:network

or network as 192.168.100.0/24, or fec0:dead:beef::/64 or a list of networks -

sample filtering rule:

pass inet proto tcp from $localnet to any port $ports keep state