Migrate from ipfw to pf