Re: the zen of pf

[Jim Mays]

So when does tagging happen?  Is it before NAT?  If so, then is the idea to
tag it on the way out and block based on tag on the way back in?

Thanks
Jim