Getting Your Setup Just Right

In general the defaults are sane

Most tunables can usually be left alone

But you need to know what they do

man pf.conf is your friend