Is it possible to write pf pass/block rules that match the ipv6 interface ID and ignore the prefix (a wildcard prefix if that makes sense)? As my ISP's assigned prefix is not static/stable, and my systems always create the same IID when using SLAAC, it would really be helpful to have this feature for ipv6 firewalling.
Thank you, Chris

