Swap order of ruleset load and enabling pf to work around a problem on altq

startup. Moreover, this is the "more logic" order.

etc/rc.d/pf

@@ -47,14 +47,14 @@ pf_prestart()
 pf_start()
 {
 	echo "Enabling pf."
-	if ! ${pf_program:-/sbin/pfctl} -si | grep -q "Enabled" ; then
-		${pf_program:-/sbin/pfctl} -e
-	fi
 	${pf_program:-/sbin/pfctl} -Fa > /dev/null 2>&1
 	if [ -r "${pf_rules}" ]; then
 		${pf_program:-/sbin/pfctl} \
 		    -f "${pf_rules}" ${pf_flags}
 	fi
+	if ! ${pf_program:-/sbin/pfctl} -si | grep -q "Enabled" ; then
+		${pf_program:-/sbin/pfctl} -e
+	fi
 }
 
 pf_stop()