The text d0ee21c24a2b, as FreeBSD 11.2-RELEASE shipped it.
Introduction to IP packet filtering
ipfilter(4) on FreeBSD now