Being a user of ipfilter, I always longed for it to benefit from the same treatment as ipfw in daily security checks, so I undertook the implementation of an ipf equivalent of 500.ipfwdenied. In the course of that, I noticed that much of that script was non-trivial *and* duplicated wrt 600.ip6fwdenied *and* would be duplicated in my own ipfdenied script.
Consequently, I would like to propose that most of the complexity of these scripts be factored out into a common file, which could then also be harnessed for ipfilter. And since after moaning for a change I'd be expected to put my code where my mouth is, a patch against -CURRENT is available for your perusal and comments from: http://www.cuivre.fr.eu.org/~thomas/periodic-fw.diff Thomas. -- [EMAIL PROTECTED] To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-current" in the body of the message
