> My idea is an keyword specific for each interface.
> Sample:
> ipfw add allow ip from any to me_xl0 via xl0
This is easy to do with a little bit of shell hacking in rc.firewall
me_xl0=`ifconfig xl0 | awk '/inet /{ print $2;}'`
Ditto for net_xl0.