うーむ…

20090531:
For those who use ipfw and especially pf, those two firewalls
are now started BEFORE the network is initialized (i.e., before
rc.d/netif). Please review your rules to make sure that your
interfaces will be properly described.