I am somewhat entertained by Michael W. Lucas’s most recent blog post about IP Sets. This is mostly because, as he points out, he could use one pf config file across multiple machines and BSDs for network management, but has to fiddle with ipsets to get different Linux machines to match.