I'm attempting to move our PF rules from a PKG to hosting them on our GitHub repo and pulling them with a script / policy using the GitHub API. I don't modify the default PF config but create our own config with it's own Launch Agent incase some update overwrites the default pf.conf.

@sokurote & @mag perhaps [this(http://krypted.com/mac-security/command-line-firewall-management-in-os-x-10-10/) from @krypted318 might help?

@sokurote @mag @bentoms Has anyone looked into building the pf configs with the Murus application? It's port based rather than application path based.

@spraguga Just seeing this thread, did you get a chance to get this loaded?