2. Add a rule to default /etc/pf.conf to allow incoming ssh connections, such as:
# cat /etc/pf.conf ... pass in on egress proto tcp to any port ssh ...
3. Reload pf with:
# pfctl -f /etc/pf.conf
4. Update the system by fetching the sources via ftp and patching.
5. Set up $PKG_PATH to install packages.
6. Configure MX records etc. at domain registrar, perhaps with an unused domain for testing purposes.