pf Rule Generator
Render shared firewall-rule JSON as a review-only portable pf.conf filter-rule subset.
This tool handles input and primary processing in your browser and is designed not to send the input to QuickKit’s server.
Avoid live production secrets; use dummy or masked data where possible. Data handling details
pf.conf filter rules
How it works
Imports only shared firewall-rule JSON and renders a portable pf.conf filter-rule subset. It supports IPv4/IPv6 input or output filtering, protocol, one expanded rule per address/port combination, logging, and comments. Block actions are always rendered with an explicit blockspec, so drop stays `block drop` and reject stays `block return` regardless of the surrounding `set block-policy`. Anchor/ruleset ordering, NAT, routing, forwarding, state matching, and platform-specific pf variants are deliberately outside scope. Review before use; nothing is applied.