OpenSolaris Automatic IPfilter Rules
This is a neat feature that allows for automatic (using standard Solaris SMF service) host-based firewall configuration at package installation time. It also allows the firewall configuration for a service to be packaged.
Read more about the proposal and its implementation here.