cvs commit: src/sys/contrib/pf/net if_pflog.c if_pflog.h if_pfsync.c if_pfsync.h pf.c pf_ioctl.c pf_norm.c pf_osfp.c pf_table.c pfvar.h src/sys/contrib/pf/netinet in4_cksum.c

[Eric Masson]

>>>>> "Bruce" == Bruce M Simpson <Bruce> writes:

 Bruce> Well, for one thing, I've been toying with the idea of IPSEC NAT
 Bruce> passthrough. This has been raised lately on various London
 Bruce> community wireless lists.

Ok.

 Bruce> I'd also like to get some means of filtering KaZaA out of my
 Bruce> network. And finding answers to the interesting problems you get
 Bruce> when you introduce a unidirectional path into the mix (satellite
 Bruce> interfaces with telco/ether return).

Neat projects. (Regarding Kazaa, in the meantime, this url may help,
http://jk.yazzy.org/articles/openbsd/kazaa.html)

I was thinking of the following link as well (Itojun's thoughts to
use pf as tagging engine for Kame ipsec)
http://www.freebsdforums.org/forums/showthread.php?threadid=11519

 Bruce> I am also extremely pleased that the enthusiasm generated by the
 Bruce> pf import has resulted in other work getting done which we
 Bruce> wanted done before 5.3, as well as being appealing to our
 Bruce> prospective user base.

Imho, pf in FreeBSD codebase is great news :)

Eric Masson

-- 
 Je vais mettre Mouse Office pour voir combien de kilomètres je parcours
 entre 2 changements de scotch et nettoyage de boule. Même dans le
 domaine du petit bricolage, il faut savoir rester rigoureux.   :-)
 -+- CH in Guide du Macounet Pervers : Bien bricoler sa souris -+-