How to delay opening of ports (using pf firewall) after OS start up?

[ikevinjp]

I have a server with multiple jails configured to start automatically at bootup. The thing is I'd like to wait for all the jails to have started to allow any traffic in via the ports. This means I'd like the machine to have all ports closed, wait for all jails/services to start up, then open the ports - typically, say, after 5 mins. after bootup.

How do I configure the pf firewall to delay opening the ports?

 

[SirDice]

If there's no service listening the port is closed.

 

[CoTones]

Have two PF configuration files and use, when needed, pfctl.

 

[ikevinjp]

Is this the best way to configure the script: http://osresources.com/content/2/10/en/how-to-execute-a-script-during-boot-up-on-freebsd.html

Using the pf command [cmd=]pf -f /etc/pf2.conf[/cmd]
?

 

[CoTones]

Yes, only command should be [cmd=]pfctl -f /etc/pf2.conf[/cmd]