Are there any "best practice" settings for specific OS/firewalls? I use FreeBSD and pf.