must specify inet/inet6 for icmp
enable and start pf