cvs commit: src/sys/contrib/pf/net if_pflog.cif_pflog.hif_pfsync.c src/sys/contrib/pf/netinet in4_cksum.c

[Wouter Clarie]

On Thu, 26 Feb 2004, Tim Kientzle wrote:

> Dunno about pf, but neither ipfw nor ipf have one feature I've been
> looking for.  I'd like to be able to say something like:
> 
>    create set BLACKLIST
>    drop ip in BLACKLIST
> 
> where BLACKLIST is a user-defined and easily-modifiable set of arbitrary
> addresses.  Probably implemented via a hash-table or search tree.
>
> [snip]

Piece of cake for pf: http://www.openbsd.org/faq/pf/tables.html

Wouter