Why don't you check NetBSD's npf? It's not yet as featured as pf but will be. And NetBSD is a very stable system.