'sticky' action, does not affect pass/block, typical use
ext_if = "xl0" # change to match *your* external interface match out on $ext_if from <clients> nat-to ($ext_if)
Load the sample file
$ sudo pfctl -vnf samples/example007