best practices default routes for all the things as i said, real common mistake pf.conf tricks spend extra time in the planning stages