IPF (IP Filter) has a config file (as opposed to say, running some command again and
again for each new rule). The config file drips with Unix: There's one rule per line, the
"#" mark denotes a comment, and you can have a rule and a comment on the same
line. Extraneous whitespace is allowed, and is encouraged to keep the rules readable.