pfctl bits


working the syntax out: bunch of developers, whiteboard/paper

beer is optional, but helps ;)