James, On Tue, Dec 14, 2004 at 12:33:07AM -0500, James wrote: J> I'm personally against modifying ipfw(4) for this purpose. It gets into the J> complexity of syntax and simply violates the initial simple model of the whole J> ipfw packet filter itself. I agree in that freebsd systems acting as routers J> need a more "efficient" or "better" engine by allowing per-interface firewall J> hooks, but we all know pfil_hooks api already provides this; and modifying J> ipfw for this is just a mess for a little gain.
you will not notice anything new in your day to day ipfw usage. The change will not hurt any of current users. -- Totus tuus, Glebius. GLEBIUS-RIPN GLEB-RIPE _______________________________________________ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "[EMAIL PROTECTED]"