When I had to do some pf work, googling around rendered this project which uses pf to provide network segmentation for jails and edge firewalling. Was quite useful learning reference:

https://github.com/sinner-/ansible-freebsdvps/blob/master/ro...