IP Networking

Hi everyone.

I'm trying to setup eMule and torrents on the local network behind the BSD server. And everything seems to work except one detail - it works as long as

Code:

${fwcmd} add deny log tcp from any to any in via ${oif} setup

is commented out. Meaning that not only required ports are open, but any other ports.
My question is how do I setup everything to pass only specific ports for torrent and eMule and block everything else?
I've tried writing similar rule, but allowing needed ports, but it doesn't work. For instance -

Code:

${fwcmd} add pass tcp from any to any in via ${oif} 4662 setup

.

Thanks in advance.

I suppose this will work
pass in log quick on ${oif} inet proto tcp from any to any port 4662

It doesn't work. And I don't know why. Is there any order for rules to appear? Or some other rules that can possibly block this one?