Gregory Bond wrote: >>My idea is an keyword specific for each interface. >>Sample: >>ipfw add allow ip from any to me_xl0 via xl0 >> >> > >This is easy to do with a little bit of shell hacking in rc.firewall > me_xl0=`ifconfig xl0 | awk '/inet /{ print $2;}'` > >Ditto for net_xl0. > Ya, that's right.:) The power of ipfw in its simplicity.