On 2009-06-30 17:07, Dag-Erling Smørgrav wrote: > One option would be to start pf with a pre-cooked rule set that allows > only DHCP and nd6 / rtsol or similar, then load the user-provided rule > set once all interfaces are up. Please see also the suggestion here: http://docs.freebsd.org/cgi/mid.cgi?4A44B7DE.2090503