9/4 Does anyone know whether there's a way to use interface names
in an ipfilter/ipnat configuration, as opposed to an interface's IP
address? -John
\_ With ipfw there was, and I think ipf has a way to. Must dig some.
... with pf (openbsd) it is very simple.
--scotsman
\_ Yeah pf is the reason I had OpenBSD on this box previously,
but it began behaving very erratically, I found the upgrade
process to be incredibly time-consuming and badly documented,
and searching through mailing list archives for answers to
questions I had usually turned up something analogous to
"read the fucking source and quit wasting our time, idiot".
In short, unusable for a box that just has to work. By
the way, I met the guy who wrote pf; he's really cool. -John
\_ If you've switched to FreeBSD, I think there was some
project to port pf over. I don't know how far along
they are, but that may be an option by now. ...Aha
/usr/ports/security/pf --scotsman |