Hello,
-
Remove OpenSSL - i know is most popular one, and they claim already remove bugs, even complain that they don’t have enough money to maintain code (i don’t believe them because in 2 months without any support OpenBSD team remove so much old code and many bugs in first few days they remove 20 000 not used code) but LibreSSL is more secure and lighter. Other argument is OpenSSH and LibreSSL are part of that same Team and integrated.
-
Rules grouping. I know there are comments but if i like use comments so that i will remember for what reason i put some rule, then i lost track in reading all fw rules (i have quiet long list of rules - pf is simpler then iptables). In WinBox this can look like a tree when you can expand rules group and in Terminal adding group in print to print only this exact roles that i wont check or modify.
-
auto remove rule after time: like add open port for 60s and then remove rule to close access to port without close existing connection to close port.