Somewhere I was reading about FreeBSD having a securelevel of 3 which reportedly prohibited the modification of active ipfilter rules. I don't recall seeing such a level in OpenBSD. Would it be a commendable feature? Right now our level 2 locks everything including the ipfilter rules.