PacketFilter Service for OS X

service.pp

  # Ensure PacketFilter is running
  service { 'pfctl':
    ensure   => 'running',
    provider => base,
    restart  => 'pfctl -d && pfctl -F all && pfctl -f /etc/pf.conf && pfctl -e',
    start    => 'pfctl -f /etc/pf.conf && pfctl -e',
    status   => "echo \"pfctl -s info 2>/dev/null | grep Status | [ $(awk '{print \$2}') == Enabled ]\" | bash",
    stop     => 'pfctl -d',
  }