All, As suggested. Just to confirm that it perfectly works. I made a NAT on ext_if from int_if
In principle : - create a bridge, add the int_if to the bridge - add a rule filtering and tagging based on MAC address ex : brconfig bridge0 rule pass in on fxp0 src 9:8:7:6:5:4 tag boss - filter with pf based on the tag of the packets Thanks for pointing this out.