Index: branches/releng-9.0/nanobsd/files/etc/pf.hybrid.conf
===================================================================
--- branches/releng-9.0/nanobsd/files/etc/pf.hybrid.conf	(revision 10700)
+++ branches/releng-9.0/nanobsd/files/etc/pf.hybrid.conf	(revision 10704)
@@ -59,6 +59,6 @@
 rdr on { $captive_portal_interfaces } proto tcp from $wl_net to !$wl_net port http -> 172.31.255.1 port 8081
 
-# Redirect some internal facing services outside (7)
-rdr on $ext_if inet proto tcp from any to $ext_if port 8081 tag SRV -> 172.16.4.46 port http
+# Load autogenerated entries, like the remote mappings (7)
+include "/etc/pf.hybrid.conf.local"
 
 # Make the device on WL find the proper gateway back (7)
Index: branches/releng-9.0/nanobsd/files/etc/pf.hybrid.conf.local
===================================================================
--- branches/releng-9.0/nanobsd/files/etc/pf.hybrid.conf.local	(revision 10704)
+++ branches/releng-9.0/nanobsd/files/etc/pf.hybrid.conf.local	(revision 10704)
@@ -0,0 +1,6 @@
+#
+# This is an example file and WILL be overwritten when running /tools/wl-config
+#
+
+# Redirect some internal facing services outside (7)
+rdr on $ext_if inet proto tcp from any to $ext_if port 8081 tag SRV -> 172.16.4.46 port http
Index: branches/releng-9.0/nanobsd/files/tools/wl-config
===================================================================
--- branches/releng-9.0/nanobsd/files/tools/wl-config	(revision 10700)
+++ branches/releng-9.0/nanobsd/files/tools/wl-config	(revision 10704)
@@ -32,5 +32,5 @@
 # Determine it's statup and running location and some other hints
 # Skip named.conf as it not planned in current release
-FILES="authorized_keys dhcpd.conf dnsmasq.conf motd rc.conf.local resolv.conf wleiden.yaml"
+FILES="authorized_keys dhcpd.conf dnsmasq.conf motd rc.conf.local resolv.conf pf.hybrid.conf.local wleiden.yaml"
 file_details() {
   POST_CMD=""
@@ -70,4 +70,9 @@
      STARTUP_LOC="/cfg/${FILE}"
      RUNNING_LOC="/etc/${FILE}"
+   ;;
+   'pf.hybrid.conf.local')
+     STARTUP_LOC="/cfg/${FILE}"
+     RUNNING_LOC="/etc/${FILE}"
+     POST_CMD="service pf reload"
    ;;
    'wleiden.yaml')