Your browser does not seem to support JavaScript. As a result, your viewing experience will be diminished, and you have been placed in read-only mode.
Please download a browser that supports JavaScript, or enable it if it's disabled (i.e. NoScript).
Is it possible for NAT rules be dynamically set up and removed by a scripted process?
There are some anchors in the ruleset for this purpose, and some packages do add/remove their own rules in various ways.
If you know how to use pfctl to do this directly, it should work.