jailnet="192.168.0.0/24" # ... nat on $ext_if from $jailnet to any -> ($ext_if)