PF + pfctl
pfctl keys:
pfctl -f /etc/pf.conf Load the pf.conf file
pfctl -nf /etc/pf.conf Parse the file, but don't load it
pfctl -Nf /etc/pf.conf Load only the NAT rules from the file
pfctl -Rf /etc/pf.conf Load only the filter rules from the file
pfctl -sn Show the current NAT rules
pfctl -sr Show the current filter rules
pfctl -ss Show the current state table
pfctl -si Show filter stats and counters
pfctl -sa Show EVERYTHING it can show

взято с http://w4lkers.blogspot.com/2008/01/pf-pfctl.html