This brings up a question I hadn't thought to ask before. How SMP-friendly is the current implementation of IPFW? I will be building some routers/firewalls that will require high performance, and do not want to run into a situation where the firewall is single-threaded (or giant-locked) and becomes a bottleneck. --Brett Glass