Did anybody already play around with the new on-host firewall released with 9.5? I for the life of mine, cannot get this to work. Behavior seems worse than erratic to me.

Guesses so far:

ipfw rule writes seem to not honour subnet/pool network segment size and always default back to /24 size. Multiple ipfw table entries are generated for "same" rule...

Somebody have the firewall up and running with expected results?