per-interface packet filters

[Gleb Smirnoff]

  James,

On Tue, Dec 14, 2004 at 12:33:07AM -0500, James wrote:
J> I'm personally against modifying ipfw(4) for this purpose. It gets into the
J> complexity of syntax and simply violates the initial simple model of the whole
J> ipfw packet filter itself. I agree in that freebsd systems acting as routers
J> need a more "efficient" or "better" engine by allowing per-interface firewall
J> hooks, but we all know pfil_hooks api already provides this; and modifying
J> ipfw for this is just a mess for a little gain.

you will not notice anything new in your day to day ipfw usage. The change will
not hurt any of current users.

-- 
Totus tuus, Glebius.
GLEBIUS-RIPN GLEB-RIPE