PF goes way back to the early versions of BSD ... don't attempt this unless you're comfortable using Terminal as changing the firewall rules can affect how your Mac receives network data.