I have a vnet jail for my physical NIC. In order to start the pf service in that jail, I had to add a devfs.rule to unhide /dev/pf.
I also have wireguard jails which I intend to do the same, and connect them to my NIC-jail. (everything is vnet).
Does anyone know if this is a bad idea?
Will...