cvs commit: src/sys/netinet ip_fw.h ip_fw2.c

[Dag-ErlingSmørgrav]

Luigi Rizzo <luigi at FreeBSD.org> writes:
>   This implement a flexible form of "persistent rules" which you might
>   want to have available even after an "ipfw flush".
>   Note that this change does not violate POLA, because you could not
>   use set 31 in a ruleset before this change.

This reminds me, is there a way to delete a keep-state rule without
also deleting the dynamic rules it spawned?

DES
-- 
Dag-Erling Smørgrav - des at des.no