jailnet="192.168.0.0/24"
# ...
nat on $ext_if from $jailnet to any -> ($ext_if)