table <IPSpoof-LAN> file "/etc/pf/spoofing/IPSpoof-LAN"
table <IPSpoof-WLAN> file "/etc/pf/spoofing/IPSpoof-WLAN"
table <IPSpoof-DMZ1> file "/etc/pf/spoofing/IPSpoof-DMZ1"
table <IPSpoof-DMZ2> file "/etc/pf/spoofing/IPSpoof-DMZ2"
table <IPSpoof-DMZ3> file "/etc/pf/spoofing/IPSpoof-DMZ3"
table <DNS-Servers> file "/etc/pf/services/DNS-Servers"

set skip on lo

scrub in

# DEFAULT POLICY
block log all

# SPOOFING
block in log on $WAN inet from <IPSpoof-LAN> to any
block in log on $WAN inet from <IPSpoof-WLAN> to any
block in log on $WAN inet from <IPSpoof-DMZ1> to any
block in log on $WAN inet from <IPSpoof-DMZ2> to any
block in log on $WAN inet from <IPSpoof-DMZ3> to any

block in log on ! $LAN inet from <IPSpoof-LAN> to any
block in log on ! $WLAN inet from <IPSpoof-WLAN> to any
block in log on ! $DMZ1 inet from <IPSpoof-DMZ1> to any
block in log on ! $DMZ2 inet from <IPSpoof-DMZ2> to any
block in log on ! $DMZ3 inet from <IPSpoof-DMZ3> to any