I'm kind of curious how to do it with pfctl like he mentions in the doc?