On Wed, 9 Nov 2011, Nick Hilliard wrote: > On 09/11/2011 15:18, Jonathan Lassoff wrote: >> I've found that this works decently well, via pfsync. > > I meant config sync, not state sync. put the main portion of the conf in subversion as an include file and factor out local differences in the configs with macros that are defined in pf.conf Easy.