Все сделал как вы сказали, но не работает, вот часть конфига, может я опять чтото напутал?:

#HOSTNEW
set state-policy if-bound
nat on $EXT_IF inet from 192.168.0.100 to !(self) -> ($EXT_IF)

block in all
block out all

block in quick on $EXT_IF from any to $LOCALHOST
block in on $EXT_IF from <private> to any
block in quick on $EXT_IF from {<portscanofly>,<portscanfile> }

                                    # I N T E R N A L  T R A F F I C
#HOSTNEW_SQUID
pass out on $EXT_IF inet from $EXT_IF to any
pass in quick on $INT_IF inet from $INT_IF:network to $INT_IF
pass out quick on $INT_IF inet from $INT_IF to $INT_IF:network