James,

On Tue, Dec 14, 2004 at 12:33:07AM -0500, James wrote:
J> I'm personally against modifying ipfw(4) for this purpose. It gets into the
J> complexity of syntax and simply violates the initial simple model of the 
whole
J> ipfw packet filter itself. I agree in that freebsd systems acting as routers
J> need a more "efficient" or "better" engine by allowing per-interface firewall
J> hooks, but we all know pfil_hooks api already provides this; and modifying
J> ipfw for this is just a mess for a little gain.

you will not notice anything new in your day to day ipfw usage. The change will
not hurt any of current users.

-- 
Totus tuus, Glebius.
GLEBIUS-RIPN GLEB-RIPE
_______________________________________________
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to