Per user rules

/etc/authpf/users/peter/authpf.rules

client_out = "{ domain, http, https }"
pass inet from $user_ip to 192.168.103.84 port 9000
pass quick inet proto { tcp, udp } from $user_ip to \
     any port $client_out	

/etc/authpf/users/chris/authpf.rules

pass from $user_ip os = "OpenBSD" to any