tcpwrappers Removed
tcpwrappers, with libwrap and tcpd has been removed. Convert any /etc/host.deny or/etc/host.allow entries to PF rules.
Pretty simple really: .allow entries can be fine tuned to specific pass from $source to $target port $allowed with all your PF spices.