Basic firewall (DHCP NAT)

Setting up my first firewall and would be happy for some feadback if I have set it up in a secure way.

It is a private firewall in my house.
No server on the Intranet, i.e. only
clients on Intranet to access Internet.

DHCP client on the External inerface.
NAT to be used between Intranet and Internet.

The setup works but, is my setup made in a secure way or can I do some improvements.

My "pf.conf"

ExtIF="rl0"              # External Interface
IntIF="rl1"              # Internal Interface

scrub in all

nat on rl0 from $IntNet to any -> (rl0)

block in quick on $ExtIF from $NoRouteIPs to any block out quick on $ExtIF from any to $NoRouteIPsblock in on $ExtIF all

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related openbsd.org Links advocacy announce bugs ipv6 misc ports ports-changes security-announce smp source-changes tech Request more information about Pantek

block in on $ExtIF all

block out on $ExtIF                 all
pass  out on $ExtIF inet proto tcp  all flags S/SA keep state
pass  out on $ExtIF inet proto udp  all            keep state
pass  out on $ExtIF inet proto icmp all            keep state