Okay... I have my firewall configured so that most outgoing ports are closed. Like most here I run a web server ... So... this seems to work for the vast majority of browsers, however some other browsers seem to want the a request through some sort of new connection and then... of course they get nothing.

Here is what a typical reject would look like:How can I configure APF so that I enable this type of response to go through, but yet do not allow a connection really starting from my machine to go out.

How to allow a range of DPT=xxxxx to go out as long as SPT=80? (i.e. only responses to http requests)

However, if there is a fair chance of someone getting wget (or some other app) to spoof the "SPT=80" part... well then I will keep things as they are and life sucks for those whose browser's suck

I think what you're looking for is defining egress ports in conf.apf

Look for the [EGRESS] section. You can define common egress ports for TCP/UDP/ICMP there.