Thanks for the guidance, it is excactley what I was looking for. Wondering why this is not standard in opnsense.