Is it unwise to depend on this default rule set if it works? The default rule set makes exceptions for carp and pfsync traffic. Any possibility of adding exceptions for vpn traffice also?
I noticed that pf will load a default rule set if there is no valid
/etc/pf.conf file.
