On Mon, Jul 17, 2006 at 08:22:53AM +1200, Andrew Thompson wrote: > But.. pf runs before any userland daemons are loaded so how does it > matter if there is a short window between netif and pf if nothing is > listening?
That is one use case for PF, where you are protecting the local system. What if you are running PF on a multi-homed host? Is net.inet.ip.forwarding only ever set to 1 by /etc/rc.d/routing, or can that be set by something else before it gets that far? Gary _______________________________________________ freebsd-pf@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-pf To unsubscribe, send any mail to "[EMAIL PROTECTED]"