Pf with secondary DNS resolution

[Luke Small]

Is it worthwhile to set up a hook for pf to load rules that have URLs after
the network services that can resolve them come into effect?