Being a user of ipfilter, I always longed for it to benefit from
the same treatment as ipfw in daily security checks, so I
undertook the implementation of an ipf equivalent of 500.ipfwdenied.
In the course of that, I noticed that much of that script was
non-trivial *and* duplicated wrt 600.ip6fwdenied *and* would be
duplicated in my own ipfdenied script.

Consequently, I would like to propose that most of the complexity
of these scripts be factored out into a common file, which could
then also be harnessed for ipfilter. And since after moaning for
a change I'd be expected to put my code where my mouth is, a
patch against -CURRENT is available for your perusal and
comments from:



To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message

Reply via email to