pfctl manpage.

[Pieter Verberne]

From 'man pfctl':
When the variable pf is set to YES in rc.conf.local(8), the rule file
specified with the variable pf_rules is loaded automatically by the 
rc(8)
scripts and the packet filter is enabled.
I think pf is enabled by default now :-)