Yeah, I think pf.conf might be beyond it.<p>It can perform simple translation tasks; I've had success getting it to output graphviz dot format. But writing that pf.conf requires a (simple) mental model, where it's approaching it as a translation task: one pf.conf section for each line given, translated semi-plausibly.