I think someone sent me a link to an ng_ipfw_filter node once but I've lost it... (I think it was called ng_ipfw but that name is now taken by the netgraph/ipfw 'ipfw netgraph' packet divert option). Something that lets you do ipfw filtering on packets as they travel across a graph. As I said,I've seen one but lost it... Julian