table <klienter> { 192.168.2.0/24, !192.168.2.5 }filen /etc/klienter
192.168.2.0/24 !192.168.2.5
i /etc/pf.conf
table <klienter> persist file /etc/klienter pass out inet proto tcp from <klienter> to any port $klient_ut flags S/SA keep state
manipulere fra kommandolinje:
$ sudo pfctl -t klienter -T add 192.168.1/16 $ sudo pfctl -t klienter -T show >/etc/klienter $ sudo pfctl -t klienter -T replace -f /etc/klienter
Gjentatte kommandoer er velegnet for skripting