table <clients> { 192.168.2.0/24, !192.168.2.5 }
filen /etc/clients
192.168.2.0/24 !192.168.2.5
i /etc/pf.conf
table <clients> persist file /etc/clients pass inet proto tcp from <clients> to any port $client_out flags S/SA keep state