IPFILTER rules with shell symbloic substitution

[Dan Nelson]

In the last episode (Nov 26), fbsd_user said:
> Looking for way to code IPFILTER rules with shell symbolic
> substitution. I know how to do it in the rules, but how to get ipf
> pgm to exec in shell? Any body have example of how to setup this?

/etc/rc.firewall has lots of examples using ipfw; the concepts should
work just as well with ipf.

-- 
	Dan Nelson
	dnelson at allantgroup.com