oh, interesting; it was ipfilter for ages, and suddenly pf-only now

https://docs.oracle.com/cd/E37838_01/html/E60993/pfovw-compa...