don't you have some way to handle the other situations where pfctl -sr doesn't output exactly what pfctl -f was fed as input? how do you handle macros or the ruleset optimiser?
There are no macro's as I'm using fwbuilder to build the ruleset and isn't the ruleset optimiser is set using a set option, at the moment I cannot query any 'set' options in my ruleset to compare new rulesets against
-- Charlie Clark Network Engineer Lemon Computing Ltd Unit 9 26-28 Priests Bridge London SW14 8TA UK Tel: +44 208 878 2138 Fax: +44 208 878 2163 Email: [EMAIL PROTECTED] Site: http://www.lemon-computing.com/ Lemon Computing is a limited company registered in England & Wales under Company No. 03697052
