Here is a related but new question,
If pppx0 only exists when someone is vpn'ed in. How do people handle this in pf? If you don't define rules, packets get blocked on it. But if there is no connect, pf complains about pppx0 not having a firewall. The only thing that seems to work is set skip on pppx0. But then no rules process on it. Has anyone ran into this? how did you handle it.
