> Yes. I changed my mind now about the possible security problem and
> implemented the "openbsd solution" (see pf_default attachment). It simply
> adds some rules to block everything and some "pass" rules to not hinder
> the network configuration.
> 
> If anyone has ideas for improvements, please let me know, otherwise I'll
> commit this in a few days.

are awk and grep (ie. /usr) available at this point?

YAMAMOTO Takashi