How can I reconfigure my PF.conf to be more secure
Okay, the config is a total mess without some comments so we can know what you’re thinking instead of what you have written.  No worries, let us get this sorted out.  The syntax employed does not reflect well your intent, and in a few instances is in error or redundant.  

It also appears that the ruleset you describe that is the config is not the same as that which you say is the output of the pfctl.

For clarity’s sake, let us make this simple, and more informative.  Please post the output of 

sudo pfctl -vvv -s all


Then, please post your complete pf.conf - preferably to a place where we can comment and discuss like github or github gist. I’m seeing some discrepancies between the two files you posted (thanks for those), so I recommend explicitly writing out in NON FIREWALL SYNTAX - JUST PLAIN ENGLISH what exactly you want pf to do.


Firewall on. I blocked IP 93.184.220.29 with PF but it still popsup in netstat -n
How can I block all ports with PF except port 80 and 443?


Since I recognize a series of questions we might be at the point of diminishing returns asking larger and more detailed questions I will watch for your reply, and will make an extra effort to get this right for you but this might be a challenge in the Q&amp;A format here. Thanks for your patience in providing some more work as to what you need to work.