Regarding PF, perhaps you find this helpful too: http://mixinet.net/~sto/blog/debian/20101130_The_FreakyWall_Part_3/ -- Robert Millan