fix active-response on mac os installation

Modern versions of mac os support pf, with ipfw to be fased out by (probably) the next version of the os.