Small pf mistakes that make big holes
One thing I like in FreeBSD is pf, but many configs I see are almost good and still dangerous. Usually not because pf is bad. It is because admin forget small details. First one: pf is last match, unless you use `quick`...