Why has the default changed to 'block all' when ipf is enabled?
ipf -E; default no-match -> block all

it certainly wasn't doing this before I compiled a new kernel in early 
july.